Static task
static1
Behavioral task
behavioral1
Sample
Remittance_Details_#63307.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Remittance_Details_#63307.html
Resource
win10v2004-20240802-en
General
-
Target
Potential Phish_ Re_ Check Status_ _Update Request_ - Workspace Renewal Payment Confirmed #_0MGUO_.zip
-
Size
59KB
-
MD5
38e5867fcc07836eb079872661b90bb4
-
SHA1
b567b5f08e16b6ed8220f53d8824a3af823cde8a
-
SHA256
b9ae3eae3d633fcdaaa63eb36194492bc5aba7ebd0b3ed0ae198b793e25b2be4
-
SHA512
aa1c204da514ba5d9d7477681c32a911770926f858ec1b256ed30d4b5e49e3f25ca3f05c8f73e995f34bbfc58ab154672056808aac89845c3af94485c4f22934
-
SSDEEP
1536:xLIV3B2pEqeB0uB0z0Uai+9dSe/e54Hqjr7BR4B1r:RIVxp0faz3Se/e+qr4Bl
Malware Config
Signatures
Files
-
Potential Phish_ Re_ Check Status_ _Update Request_ - Workspace Renewal Payment Confirmed #_0MGUO_.zip.zip
Password: infected
-
Potential Phish_ Re_ Check Status_ _Update Request_ - Workspace Renewal Payment Confirmed #_0MGUO_.msg.msg
-
http://6655da9ea2ff6_233fa6RIEW6UB8ASRHARAD582246kjououyhahaout5.email
-
http://6655da9ea2ff6_233fhmsbxddrpcujgea6RIEW6UB8ASRHARAD5822465.email
-
http://AMS0EPF000001AC.eurprd05.prod.outlook.com
-
http://AMS0EPF000001AC.mail.protection.outlook.com
-
http://AS9PR05CA0112.eurprd05.prod.outlook.com
-
http://AS9PR05CA0112.outlook.office365.com
-
http://Accounting.afa.ium.pt
-
http://DBBPR07MB7563.eurprd07.prod.outlook.com
-
http://DU2PR03CU002.outbound.protection.outlook.com
-
http://EUR04-HE1-obe.outbound.protection.outlook.com
-
http://MW4PR04CA0172.namprd04.prod.outlook.com
-
http://MW4PR04CA0172.outlook.office365.com
-
http://PA1PR07MB10233.eurprd07.prod.outlook.com
-
http://PAXPR04MB8591.eurprd04.prod.outlook.com
-
http://PH7PR13MB6342.namprd13.prod.outlook.com
-
http://SA1PR13MB4894.namprd13.prod.outlook.com
-
http://SJ5PEPF000001F7.mail.protection.outlook.com
-
http://SJ5PEPF000001F7.namprd05.prod.outlook.com
-
http://accounting.afa.ium.pt
-
http://afa.ium.pt
-
http://fwtvxdegwkizwflearn.mailjnyzyhleddzarjgun.com
-
http://gmail.com
-
http://google.com
-
http://iesm365.onmicrosoft.com
-
http://mail-he1eur04on20731.outbound.protection.outlook.com
-
http://mail-northeuropeazhn15012021.outbound.protection.outlook.com
-
http://microsoft.com
-
http://mnetworks.dk
-
http://mx.google.com
-
http://mx.microsoft.com
-
http://notification.freshservice.com
-
http://pembmrkkxlzdde.mnetworks.dk
-
http://protection.outlook.com
-
http://tceq.texas.gov
-
http://w846.peachguest.com
-
https://otobo.org/)
- Show all
-
-
Headers.txt.eml
-
Remittance_Details_#63307.html.html .js polyglot