Static task
static1
Behavioral task
behavioral1
Sample
External Email Payoff Request.msg
Resource
win10v2004-20240802-en
General
-
Target
External Email Payoff Request.msg
-
Size
148KB
-
MD5
e868b545696083ab154dd49347451115
-
SHA1
278dd9a69feb8875943fa0bacce36a10482e6c5d
-
SHA256
a6cd72096047ce5287cef2ed1ee10d2a30de0954ac2efe286d61fc656fdfcaa1
-
SHA512
f2f4075c338360a35e30f9af7c395149028ad5d0c4544d9c73d1b21649410310e6977538353bdf0cde0510b1a7d7d7008c512223afaa678be63880c531350acb
-
SSDEEP
3072:tIo95iGOpy+roAmGrdRCwdpyWu39SeL5CJ:qo95iG9CmGrdRCwdpyBU
Malware Config
Signatures
Files
-
External Email Payoff Request.msg.msg
-
http://Virtru.com
-
https://apps.virtru.com/files/blue_lock.png
-
https://apps.virtru.com/files/clients/guild-mortgage/guild-mortgage_logo.png
-
https://apps.virtru.com/files/virtru_logo_lightgrey.png
-
https://go.guildmortgage.net/l/359801/2022-03-16/2qgwhvp/359801/1647473214gAfV6Ypy/Guild_logo_full_color_150px.jpg
-
https://go.guildmortgage.net/l/359801/2022-03-16/2qgwhvw/359801/1647473214qTEG2PYR/LinkedIn_icon.jpg
-
https://go.guildmortgage.net/l/359801/2024-02-02/3g9j98q/359801/1707269058fRGFheGK/OPS_Forward.png
-
https://link.edgepilot.com/s/939b56ad/QbTxjqTcwUCwMaZh0ktJ_w?u=https://mitalibhattacharya.com/
-
https://secure.virtru.com/start/?c=addedlogo&t=guildmortgage-1-0-0&s=tiffany.goff%40guildmortgage.net&p=b6d75850-d679-4368-aacd-7b915fb47fa3#v=3.0.0&d=https%3A%2F%2Fapi.virtru.com%2Fstorage%2Fapi%2Fpolicies%2Fb6d75850-d679-4368-aacd-7b915fb47fa3%2Fdata%2Fmetadata&dk=e8tCeWObOn0QIKBGym483IfOmJPN9e%2F0ORxvTuIsn04%3D
-
https://us.content.exclaimer.net/?url=https%3A%2F%2Fwww.guildmortgage.com%2Ftips-protect-wire-fraud%2F&tenantid=9U_DEVHiEeyYIAANOhMDEQ&templateid=c257fd2db1e3ed118e8b002248238412&signature=Fs1Dldqm7QcODiBJIAmpstTIWHBhvKilqf-L6R8r9uR9X3QC1Gts-PGA5b73JFo7rsfX5F8YDASRFeZWsiXxlz01KOv1un-8rr1ubGAZmCSTrGx665R5Agzc7fs0ctPZ8_W08XnfbEqk5B1hFclGxPXkVs0pQKdBC75UHsn37nAJfKOrvdDZtzlHZJ86vby32kBv4TiPetYaUV-2CJOYMvUWOAA1zIYS_GOqcNsTPv0phKUZYBOIZGIJhX806xibg8_r1T9R6RoIRs8MruSUdSqfu6kwEeNDaRUuOVD6aF_RWlhLUKGvVjkjMieVgX2oLavY6Y_5o-z6IsFz_mHgBg&v=1&imprintMessageId=86dea965-7a28-42aa-a904-f96837d6d285
-
https://us.content.exclaimer.net/?url=https%3A%2F%2Fwww.guildmortgage.com%2Ftips-protect-wire-fraud%2F&tenantid=9U_DEVHiEeyYIAANOhMDEQ&templateid=c257fd2db1e3ed118e8b002248238412&signature=Fs1Dldqm7QcODiBJIAmpstTIWHBhvKilqf-L6R8r9uR9X3QC1Gts-PGA5b73JFo7rsfX5F8YDASRFeZWsiXxlz01KOv1un-8rr1ubGAZmCSTrGx665R5Agzc7fs0ctPZ8_W08XnfbEqk5B1hFclGxPXkVs0pQKdBC75UHsn37nAJfKOrvdDZtzlHZJ86vby32kBv4TiPetYaUV-2CJOYMvUWOAA1zIYS_GOqcNsTPv0phKUZYBOIZGIJhX806xibg8_r1T9R6RoIRs8MruSUdSqfu6kwEeNDaRUuOVD6aF_RWlhLUKGvVjkjMieVgX2oLavY6Y_5o-z6IsFz_mHgBg&v=1&imprintMessageId=86dea965-7a28-42aa-a904-f96837d6d285
-
https://us.content.exclaimer.net/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fguild-mortgage-company&tenantid=9U_DEVHiEeyYIAANOhMDEQ&templateid=c257fd2db1e3ed118e8b002248238412&excomponentid=XiWw-f_hU8aSrdfNmDKZmRD3xNeUQ2L9hIZZ2t4iplg&signature=IumqmrZW3-DZfuxZKmp8hJkL-Xj3S59Q8Kn6L1bYrFptJKCmrxQqfl3EMGOYgvpSnq6OifVVC3DPyqj_kLZZYObx4vDB_naOK3UjSynkseZ3zR47QufHZhti_g_x-or30VIa5I-bpTR0WKdDPwvREqG37A02xaJfEdT8yWYUs4skO1iGZOqo3sllMbdBoW42zWWqnIdVn-2ocgATqFax2V07cmuFKdrwoM7dNIAC2UN1X6FQmAYrwGaaNQzVz3zKIZIoqVYFLbNlh4NidQBmIhzjvvFRHHd84RR_IkGWU3lPq2oi854wCAY72u21UMqgIGN06vAyBcmCCz036OmH7A&v=1&imprintMessageId=86dea965-7a28-42aa-a904-f96837d6d285
-
https://us.content.exclaimer.net/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fguild-mortgage-company&tenantid=9U_DEVHiEeyYIAANOhMDEQ&templateid=c257fd2db1e3ed118e8b002248238412&excomponentid=XiWw-f_hU8aSrdfNmDKZmRD3xNeUQ2L9hIZZ2t4iplg&signature=IumqmrZW3-DZfuxZKmp8hJkL-Xj3S59Q8Kn6L1bYrFptJKCmrxQqfl3EMGOYgvpSnq6OifVVC3DPyqj_kLZZYObx4vDB_naOK3UjSynkseZ3zR47QufHZhti_g_x-or30VIa5I-bpTR0WKdDPwvREqG37A02xaJfEdT8yWYUs4skO1iGZOqo3sllMbdBoW42zWWqnIdVn-2ocgATqFax2V07cmuFKdrwoM7dNIAC2UN1X6FQmAYrwGaaNQzVz3zKIZIoqVYFLbNlh4NidQBmIhzjvvFRHHd84RR_IkGWU3lPq2oi854wCAY72u21UMqgIGN06vAyBcmCCz036OmH7A&v=1&imprintMessageId=86dea965-7a28-42aa-a904-f96837d6d285
-
https://www.guildmortgage.com/tips-protect-wire-fraud/
-
https://www.virtru.com
- Show all
-