Behavioral task
behavioral1
Sample
81.eml
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
81.eml
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Southwest Airlines.pdf
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Southwest Airlines.pdf
Resource
win10v2004-20240802-en
General
-
Target
81.eml
-
Size
488KB
-
MD5
7af64add394c21f8e35149c7759328e2
-
SHA1
9dad486083ea51765e2564071f40d5e2714dd02d
-
SHA256
df90215c5bdb62fba9429178254dad52ba960520b034de7582a297f702112655
-
SHA512
8ed12a50700c655debc01fe0fe1004761b8c9df2a215d8d91e13c354f16ef2c59c80892cddaf244a91eda6f10faba77bb41aea11f1e007414dc97e76a7513881
-
SSDEEP
12288:XM93gLX88DT0rav4HWwKBEPy1xKWNoxlZ9icLXBJXmY2FcG:DLXBIrav42wKLxdyaQxUx
Malware Config
Signatures
-
Malformed data in PDF
A PDF can contain malformed data to evade detection
Files
-
81.eml.eml
-
http://trlwp.assignment-submit.co.in/4cqknu15917yNPi1415dopuclveaf14030KZEMFLCWBRZICZB25639GSRF17331Z12
-
http://www.finonyx.com/
-
http://www.twitter.com/FinonyxSoftware
-
http://zgsms.assignment-submit.co.in/4cuRUs15917lVTg1415wywstuhsno14030SOYEVXLAXSWJDVP25639HSNR17331w12
-
https://aka.ms/LearnAboutSenderIdentification
-
https://eu-central-1.protection.sophos.com/?d=finonyx.com&u=aHR0cHM6Ly9maW5vbnl4LmNvbS9pYnNpLWdsb2JhbC1maW50ZWNoLWlubm92YXRpb24tYXdhcmRzLTIwMjMv&p=m&i=NjNlNzNkMWYyMzM3ZTExOWFkZjExNDVl&t=bUVMWDJQN3ZDaEQzWFlHeXV1SmZtWHY2U1gvaFVMSkhhNFk1Z0JSbGRaZz0=&h=289f934e0c2e4391af76473da65a5e08&s=AVNPUEhUT0NFTkNSWVBUSVb40KRKB5e2z0nvOv_p7PHWIDxRLN1dUF8OmKVsMfANX0esvvuiDcZC_89pOG_nAAk
-
https://eu-central-1.protection.sophos.com/?d=linkedin.com&u=aHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2NvbXBhbnkvZmlub255eC1zb2Z0d2FyZS1zb2x1dGlvbnMtcHZ0LWx0ZA==&p=m&i=NjNlNzNkMWYyMzM3ZTExOWFkZjExNDVl&t=VTJZRXQzQUJ0TkIrVmFuN3hId0lpbnJxL000cWxWelNkMFNKNUlNUWU3Yz0=&h=289f934e0c2e4391af76473da65a5e08&s=AVNPUEhUT0NFTkNSWVBUSVb40KRKB5e2z0nvOv_p7PHWIDxRLN1dUF8OmKVsMfANX0esvvuiDcZC_89pOG_nAAk
-
https://eu-central-1.protection.sophos.com/?d=twitter.com&u=aHR0cDovL3d3dy50d2l0dGVyLmNvbS9GaW5vbnl4U29mdHdhcmU=&p=m&i=NjNlNzNkMWYyMzM3ZTExOWFkZjExNDVl&t=MlRNc1NJdlZnYkdYNEJCdHFBeE9PVVdLNi9OWFlVTmx6R3l4ZHNZZGdLOD0=&h=289f934e0c2e4391af76473da65a5e08&s=AVNPUEhUT0NFTkNSWVBUSVb40KRKB5e2z0nvOv_p7PHWIDxRLN1dUF8OmKVsMfANX0esvvuiDcZC_89pOG_nAAk
-
https://eu-central-1.protection.sophos.com?d=banquepatronus.com&u=aHR0cDovL3d3dy5iYW5xdWVwYXRyb251cy5jb20v&p=m&i=NjNlNzNkMWYyMzM3ZTExOWFkZjExNDVl&t=TklSdDRrNjZkTkNzelVCTnUwQ0dQOTRUYU1tVjRmZGtWc3RCSHJNOGR5bz0=&h=289f934e0c2e4391af76473da65a5e08&s=AVNPUEhUT0NFTkNSWVBUSVb40KRKB5e2z0nvOv_p7PHWIDxRLN1dUF8OmKVsMfANX0esvvuiDcZC_89pOG_nAAk
-
https://eu-central-1.protection.sophos.com?d=finonyx.com&u=aHR0cDovL3d3dy5maW5vbnl4LmNvbS8=&p=m&i=NjNlNzNkMWYyMzM3ZTExOWFkZjExNDVl&t=MnprYWVia3hxUU1rK2dXL1cwa0t1WGx4MURIYUNjd2NNRWxYVkh4L2huND0=&h=289f934e0c2e4391af76473da65a5e08&s=AVNPUEhUT0NFTkNSWVBUSVb40KRKB5e2z0nvOv_p7PHWIDxRLN1dUF8OmKVsMfANX0esvvuiDcZC_89pOG_nAAk
-
https://eu-central-1.protection.sophos.com?d=finonyx.com&u=aHR0cHM6Ly93d3cuZmlub255eC5jb20vaXNvLWNlcnRpZmljYXRpb24v&p=m&i=NjNlNzNkMWYyMzM3ZTExOWFkZjExNDVl&t=bDFLQStPS3J0NHFaZGNCRldkUEFTR0dlUXhtUmJQV1BKS2huUW85S1pRMD0=&h=289f934e0c2e4391af76473da65a5e08&s=AVNPUEhUT0NFTkNSWVBUSVb40KRKB5e2z0nvOv_p7PHWIDxRLN1dUF8OmKVsMfANX0esvvuiDcZC_89pOG_nAAk
-
https://finonyx.com/award/
-
https://www.linkedin.com/company/finonyx-software-solutions-pvt-ltd
- Show all
-
-
Southwest Airlines.docx.pdf
-
email-html-1.txt.html
-
image001.png.png
-
image002.png.png
-
image003.jpg.jpg
-
image004.jpg.jpg
-
image005.png.png
-
image006.png.png
-
image007.png.png
-
image008.png.png
-
image009.png.png
-
image010.png.png
-
image011.png.png