Static task
static1
Behavioral task
behavioral1
Sample
20f18ba6-6fb2-d75a-4077-e711c0bd8527.eml
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
20f18ba6-6fb2-d75a-4077-e711c0bd8527.eml
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
email-html-2.html
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
email-html-2.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
email-plain-1.txt
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
email-plain-1.txt
Resource
win10v2004-20240802-en
General
-
Target
20f18ba6-6fb2-d75a-4077-e711c0bd8527.eml
-
Size
12KB
-
MD5
8d009482a4dc15ec73051e38de1c52db
-
SHA1
345b4c8016414da7760c55c1b86320125f94462c
-
SHA256
75002bd17dfcc894e88dee8749fc379710b90240aa03f3940d02bd86fb29d897
-
SHA512
15cf6eee2d85ec592f89492668fc854abae6213235544af0f8f6259ec277b87a79522b337cd3fcb3b27c460c7f70adfbd7001530f9d533df1681c50d60afa991
-
SSDEEP
192:mq05hW1p67EBJe57aJFnN5d22QbrYd7WdlHWcGjyDhnU84ewp57JIKUZ:xq01Yw3e8fl+Yd74tGjyNGrNA
Malware Config
Signatures
Files
-
20f18ba6-6fb2-d75a-4077-e711c0bd8527.eml.eml
-
http://fuyt.org
-
http://fuyt.org/test1/get.php?pid=092CAAB04AA69851013F17A11933F6E6&first=true
-
http://zerit.top/dl/build2.exe
-
https://0nline.bp-la.online/
-
https://soporte.enlanube.com.co/firma_soporte.png
-
https://soporte.enlanube.com.co/glpi/front/document.send.php?docid=10623&tickets_id=8881]
-
https://soporte.enlanube.com.co/glpi/front/document.send.php?docid=10624&tickets_id=8881]
-
https://soporte.enlanube.com.co/glpi/index.php?redirect=ticket_8881&noAUTO=1
-
https://webordendecompra.s3.eu-west-2.amazonaws.com
-
-
email-html-2.txt.html
-
email-plain-1.txt