Static task
static1
Behavioral task
behavioral1
Sample
External Email secure' ANS-- RQM-151393 INC - W ID suspended.msg
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
message_v2.rpmsg
Resource
win10v2004-20240802-en
General
-
Target
External Email secure' ANS-- RQM-151393 INC - W ID suspended.msg
-
Size
182KB
-
MD5
9a9028d61ce792545d58104284fec3ea
-
SHA1
02f747620a9252fa4a7f5806e76ebd6464610d30
-
SHA256
92d52f19422a72074e143ba1c426e81e684d5530aec205086ebecb05f7f32e62
-
SHA512
2c0fdef9d49ebee65bd7f1d8472960567461694c6b7e65f6d91053f822564f1c67c2d64cb4d1966f9fe2fdc6223ba2aa24f4de1556aef8ed0c794b21192852a8
-
SSDEEP
3072:M1fXT1mdhtQwhXHULAmgeHaPTqRmjBmeLAMiX1tN:WfXT1mTZhXHxDB+X1
Malware Config
Signatures
Files
-
External Email secure' ANS-- RQM-151393 INC - W ID suspended.msg.msg
-
http://nttdata.com
-
https://go.microsoft.com/fwlink/?Linkid=844050
-
https://go.microsoft.com/fwlink/p/?linkid=857875
-
https://outlook.office365.com/Encryption/lock.png
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBL1PR12MB52061E914D72065A38544B7E97992%40BL1PR12MB5206.namprd12.prod.outlook.com%3e
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBL1PR12MB52061E914D72065A38544B7E97992%40BL1PR12MB5206.namprd12.prod.outlook.com%3e
-
-
message_v2.rpmsg