Static task
static1
Behavioral task
behavioral1
Sample
Fwd Bidding Confirmation 3030574149 of 07102024.msg
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Fwd Bidding Confirmation 3030574149 of 07102024.msg
Resource
win10v2004-20240709-en
General
-
Target
Fwd Bidding Confirmation 3030574149 of 07102024.msg
-
Size
237KB
-
MD5
f6aaab5d01b906eb9dfe3f39176ef279
-
SHA1
483e7a9ebfc88f2e5588a5a24b7d452d2af1cde2
-
SHA256
33e4db99dc5d1b2bc136db69df01e4b0f7ada9407024cb39b7df79d5090dbb42
-
SHA512
63577019d4b43470fb73f4b4d232452060112f6f1d6d7f42a56f8f103023b3415b3aeee30b4723e42cec33182557fdd2018452c60890263b60b4eac29d1ef857
-
SSDEEP
3072:F4q5FJMpguGciPIy8HC1U3VFaiNycbuHC1U3VFaiNycbE1:yEgp8ciPM+U3VxIcbc+U3VxIcb
Malware Config
Signatures
Files
-
Fwd Bidding Confirmation 3030574149 of 07102024.msg.msg
-
http://fugazzotto-rost.com
-
http://selectbuildingsupply.co
-
http://txdot.gov
-
http://worldistitmar.com
-
http://www.selectbuildingsupply.co
-
http://www.selectbuildingsupply.co/
-
https://c-5CH04.na1.hubspotlinks.com/Ctc/UA+113/c-5CH04/VWHThs7fspFXN2pyncdYj-RxW8rPchQ5hlvFhN8fXWzF2-dz0W5BW0B06lZ3nNN3n8Ry_T0WL5W6TRh5d3n9NXTW8bg81J6NC7mTW1LF5BG877yDBVgv7NH7BNJrVW5lKxjk6fB29yVjhXbg65RPJBW2RYkng8QWSX8N2Rr2v-Qh5yyW97BVwK5MT2mRW5lGRV_2FQbR1N5XPT3PChxT2W72fxxd1BjXLzW8l21LL20YbDFW3jGldC8fzv3TW7w8w-D78k8qTW5cNKd_5n7KTSVr2Kb99cJFtcf3lf31K04
-
https://c-5CH04.na1.hubspotlinks.com/Ctc/UA+113/c-5CH04/VWHThs7fspFXN2pyncdYj}
-
https://s3.us-west-2.amazonaws.com/enter-portal.online-pre-office-trence-hd-reticense/docuformverifydocunoteresponsedocusection.html?https://nam10.safelinks.protection.outlook.com/?associate=%2F&data=05%7C02p67e64e821c4c08dca1086add%7C57d837554267426c83d0dda81f4d4391%7C1%7C0%7C6385WFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=Va9rS0mKG8%2FFEbYwGn4XpBoqfpaVZbxdsuk0A5ytR78%3D&reserved=0
-
https://s3.us-west-2.amazonaws.com/enter-portal.online-pre-office-trence-hd-reticense/docuformverifydocunoteresponsedocusection.html?https://nam10.safelinks.protection.outlook.com/?associate=%2F&data=05%7C02p67e64e821c4c08dca1086add%7C57d837554267426c83d0dda81f4d4391%7C1%7C0%7C6385WFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=Va9rS0mKG8%2FFEbYwGn4XpBoqfpaVZbxdsuk0A5ytR78%3D&reserved=0
-
https://urldefense.proofpoint.com/v2/url?u=https-3A__c-2D5CH04.na1.hubspotlinks.com_Ctc_UA-2B113_c-2D5CH04_VWHThs7fspFXN2pyncdYj-2DRxW8rPchQ5hlvFhN8fXWzF2-2Ddz0W5BW0B06lZ3nNN3n8Ry-5FT0WL5W6TRh5d3n9NXTW8bg81J6NC7mTW1LF5BG877yDBVgv7NH7BNJrVW5lKxjk6fB29yVjhXbg65RPJBW2RYkng8QWSX8N2Rr2v-2DQh5yyW97BVwK5MT2mRW5lGRV-5F2FQbR1N5XPT3PChxT2W72fxxd1BjXLzW8l21LL20YbDFW3jGldC8fzv3TW7w8w-2DD78k8qTW5cNKd-5F5n7KTSVr2Kb99cJFtcf3lf31K04&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=oCPHssm15L7OZTG-Q7kIiJxPsk6QsWbZm_J_Vno4ovA&m=Lyne0aYWc7UDnqoOKRKBTkuXS4P_JPeTn_6icvTYqRRK8OPeU4W9ZIGBG4nOe5rl&s=0RpejMCbDY0WAuHb5xK4-z5GCxYmAVxX7Z1TbgGDaRQ&e=
- Show all
-
-
image001.png.png