Static task
static1
Behavioral task
behavioral1
Sample
External Email secure' ANS-- RQM-151393 INC - W ID suspended.msg
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
message_v2.rpmsg
Resource
win10v2004-20240802-en
General
-
Target
External Email secure' ANS-- RQM-151393 INC - W ID suspended.msg
-
Size
182KB
-
MD5
1537eb66d93ec0400a8482c000808dcd
-
SHA1
5621a902cfaadb42de2fd7e4fcbae6856501447c
-
SHA256
27a124a4090c3c4f8f514dea1467f0e412a33ced462983b42b456fa21529870c
-
SHA512
427099b7c185b4cc5a359235349477a756d4da0fa4da1e160781da0dfe8caeb04ec76e7219b6f41d0294da5f56c9b07598f07a324d4fe43c1ba07f4a0a294912
-
SSDEEP
3072:Y1fXT1mdhtQwhXHULAmgeHaPhqRmjBmeLAMiX1tN:CfXT1mTZhXHXDB+X1
Malware Config
Signatures
Files
-
External Email secure' ANS-- RQM-151393 INC - W ID suspended.msg.msg
-
http://nttdata.com
-
https://go.microsoft.com/fwlink/?Linkid=844050
-
https://go.microsoft.com/fwlink/p/?linkid=857875
-
https://outlook.office365.com/Encryption/lock.png
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBL1PR12MB52061E914D72065A38544B7E97992%40BL1PR12MB5206.namprd12.prod.outlook.com%3e
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBL1PR12MB52061E914D72065A38544B7E97992%40BL1PR12MB5206.namprd12.prod.outlook.com%3e
-
-
message_v2.rpmsg