Overview
overview
5Static
static
5MDE_File_S...ba.zip
windows7-x64
1MDE_File_S...ba.zip
windows10-2004-x64
12024630769...1).eml
windows7-x64
52024630769...1).eml
windows10-2004-x64
3comprobant...io.jpg
windows7-x64
1comprobant...io.jpg
windows10-2004-x64
3email-html-2.html
windows7-x64
3email-html-2.html
windows10-2004-x64
5email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1notificaci...ES.pdf
windows7-x64
3notificaci...ES.pdf
windows10-2004-x64
3pago deuda ADRES.pdf
windows7-x64
3pago deuda ADRES.pdf
windows10-2004-x64
3Behavioral task
behavioral1
Sample
MDE_File_Sample_4c18bed95187cc4b6efc9de2d2b3860c393382ba.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
MDE_File_Sample_4c18bed95187cc4b6efc9de2d2b3860c393382ba.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
202463076919420000 (1).eml
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
202463076919420000 (1).eml
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
comprobante banco agrario.jpg
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
comprobante banco agrario.jpg
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
email-html-2.html
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
email-html-2.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
email-plain-1.txt
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
email-plain-1.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
notificacion ADRES.pdf
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
notificacion ADRES.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
pago deuda ADRES.pdf
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
pago deuda ADRES.pdf
Resource
win10v2004-20240802-en
General
-
Target
MDE_File_Sample_4c18bed95187cc4b6efc9de2d2b3860c393382ba.zip
-
Size
915KB
-
MD5
bd98623a9409b32684ea26528c19e1b1
-
SHA1
110b082802e0c7b2aae56a86171f66cf1e33f30b
-
SHA256
d6f24b3731a6f59f68417b5f2fcb17a7c85f8cc32e8458e306e9b0b334bdbc21
-
SHA512
9001c2df886d00bd6c8b1bf94f163af5e6199f54b24afb46f825c51c410157da5ec84380a6eb5405d9a3c63fd67b61fe5e3e9d83b23d9e7031388691f4b38aa9
-
SSDEEP
24576:o/faoq//3EBpwWHow1twCA5LsYRv+wEpQLh3OOWBsHBxAa+:Oq/Py+wtTov+wCQLh3pWBsHBqa+
Malware Config
Signatures
-
Malformed data in PDF
A PDF can contain malformed data to evade detection
Files
-
MDE_File_Sample_4c18bed95187cc4b6efc9de2d2b3860c393382ba.zip.zip
Password: 0
-
202463076919420000 (1).eml.eml
Password: 0
-
https://aka.ms/LearnAboutSenderIdentification
-
-
comprobante banco agrario.jfif.jpg
Password: 0
-
email-html-2.txt.html
-
email-plain-1.txt
-
notificacion ADRES.pdf.pdf
-
pago deuda ADRES.pdf.pdf