Overview

overview

5

Static

static

1

[Phish Ale...#_.eml

windows7-x64

5

[Phish Ale...#_.eml

windows10-2004-x64

3

email-html-2.html

windows7-x64

3

email-html-2.html

windows10-2004-x64

3

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

phish_aler....0.eml

windows7-x64

5

phish_aler....0.eml

windows10-2004-x64

3

AAOPB0468...s..eml

windows7-x64

5

AAOPB0468...s..eml

windows10-2004-x64

3

email-html-1.html

windows7-x64

3

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows7-x64

3

email-html-1.html

windows10-2004-x64

3

image002.jpg

windows7-x64

3

image002.jpg

windows10-2004-x64

3

Resubmissions

11/09/2024, 14:06

240911-revkfsvaqk 5

11/09/2024, 14:04

240911-rc9xcsvcnh 5

11/09/2024, 14:01

240911-rbpj2athlp 5

11/09/2024, 13:57

240911-q9hzgatgkq 5

Sharing

Copy URL Twitter E-mail

General

  • Target

    [Phish Alert] URGENTE!_ Salary-AABQQ,Due,STATEMENT- Finance.PDF, 09_09_24 _Ref##_ ver35SharedInv#_.eml

  • Size

    131KB

  • MD5

    19eee0b4d749abff08d132f10296dd33

  • SHA1

    44ab925ad4805ed2cdf34385d951872960a01f68

  • SHA256

    dbb470aa74b52d20cd5a6d25a7fb54c1c7b9dbdc059f8eb3192f9cc9752346ed

  • SHA512

    997cfa4d07ac48363702e91c9a3e8305f9bd4b683dc1953da9c4b53392ce5adb68a209f14fff3951c62e9d519a8388f174b3fd0f8677b2ca4872bbd4caec5e51

  • SSDEEP

    3072:pLecJb//wEXTfIRiqiTTyZZEL8FyfvsaCdmbsVZJ21kZS2G:pLeE7RXTfeinn8Fusa1J2G

Score
1/10

Malware Config

Signatures

Files

  • [Phish Alert] URGENTE!_ Salary-AABQQ,Due,STATEMENT- Finance.PDF, 09_09_24 _Ref##_ ver35SharedInv#_.eml
    .eml

    Password: infected

    • http://www.rmsmedicaldevices.com/

    • http://www.rmsmedicaldevices.nl/

    • https://www.rmsmedicaldevices.com/

  • email-html-2.txt
    .html
  • email-plain-1.txt
  • phish_alert_sp2_2.0.0.0.eml
    .eml

    Password: infected

    • http://www.rmsmedicaldevices.com/

    • http://www.rmsmedicaldevices.nl/

    • https://www.rmsmedicaldevices.com/

  • AAOPB046809, Salaries-Salary_ breakdown eDocuments..eml
    .eml

    Password: infected

    • http://www.rmsmedicaldevices.com/

    • http://www.rmsmedicaldevices.nl/

    • https://p7sjjqadh6012cbd1uw2.additor.io/page/xPan8MS4kXyg

    • https://www.rmsmedicaldevices.com/

  • email-html-1.txt
    .html
  • email-html-1.txt
    .html
  • image002.jpg
    .jpg

    Password: infected