General

  • Target

    4WkHLP3zTWzBPfPL.eml

  • Size

    661KB

  • MD5

    cf5bd633983cfb454c82bfa64e2ed60f

  • SHA1

    c1a79487187bd06a8f2e8ee8506bb024db525ca7

  • SHA256

    79856e4c9fb89164255134b33eb29fd2a4949da8963e508c30f78bcdc76a2cba

  • SHA512

    04b88c35387bada6303f89632b84443bce55c7196591a00b16156098fd64744620ad3440731972ca995b7d8ecf25b4229dc4ba778640fc268ee406561748e0c9

  • SSDEEP

    12288:cOXCJWNH3v8Q44qx7/6D7r/3WQ89jJA6OL:XdqxunbGQ0FA6U

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

Files

  • 4WkHLP3zTWzBPfPL.eml
    .eml
    • http://www.allcargologistics.com/

    • https://eu-west-1.protection.sophos.com/?d=facebook.com&u=aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tL2FsbGNhcmdvbG9naXN0aWNzbHRk&i=NTg5OWNjNGEyZjg4YzIwZjkyOWY4YTli&t=aWdrU2crcGFwT2ova1l3aTF6T2x6Sk4zVFY0VEE4YWVhN0lXT3lWN0taVT0=&h=676245374c824c6496353dbd3b109004&s=AVNPUEhUT0NFTkNSWVBUSVaufBIDH5aRP3lfDj1nTIVnY0HWcL8B9qjTUrv0ifKWea0Xj7O98ettPKjuDkEEVbI

    • https://eu-west-1.protection.sophos.com/?d=linkedin.com&u=aHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2NvbXBhbnkvYWxsY2FyZ28tbG9naXN0aWNz&i=NTg5OWNjNGEyZjg4YzIwZjkyOWY4YTli&t=R2xyZ0FJYU5WajloMFFYUGNlajZEaDJYZXl6Y3NaNjlqU3c0eXUwdk11az0=&h=676245374c824c6496353dbd3b109004&s=AVNPUEhUT0NFTkNSWVBUSVaufBIDH5aRP3lfDj1nTIVnY0HWcL8B9qjTUrv0ifKWea0Xj7O98ettPKjuDkEEVbI

    • https://eu-west-1.protection.sophos.com/?d=mimecast.com&u=aHR0cHM6Ly91ay5yZXBvcnQuY3liZXJncmFwaC5taW1lY2FzdC5jb20vYWxlcnQtZGV0YWlscy8_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&i=NWIzMGJjOTkwNGI2NjQxMzNiYmM3NzA2&t=UEk4NmtqbTdTd0RPR095b0Nlb1BPWjIxY0w2akJOV0NYb29FUU9MVlF0Yz0=&h=048ccaf3d4e0455488179101f52bcc76&s=AVNPUEhUT0NFTkNSWVBUSVbIv5jQwNObMHrNuL_PxYV4QKGvIHsaSCWrIZoqxU7fW5xs3Kols5tuIhtm4LqEFmc

    • https://eu-west-1.protection.sophos.com/?d=twitter.com&u=aHR0cHM6Ly90d2l0dGVyLmNvbS9hbGxjYXJnb2ZmaWNpYWw=&i=NTg5OWNjNGEyZjg4YzIwZjkyOWY4YTli&t=VEhnUUZIMG5TRWN1Y1ZqcW9sZEpKbVJEcGlGbWhCSGNOaUVWdVNxNHdSWT0=&h=676245374c824c6496353dbd3b109004&s=AVNPUEhUT0NFTkNSWVBUSVaufBIDH5aRP3lfDj1nTIVnY0HWcL8B9qjTUrv0ifKWea0Xj7O98ettPKjuDkEEVbI

    • https://eu-west-1.protection.sophos.com/?d=youtube.com&u=aHR0cHM6Ly93d3cueW91dHViZS5jb20vdXNlci9hbGxjYXJnb2xvZ2lzdGljc2x0ZA==&i=NTg5OWNjNGEyZjg4YzIwZjkyOWY4YTli&t=dlJqdnJFdmdUUzlqWjB4bkxzWnRlZ0JGYmhpS0lqSFNQUWMyb05pU1hSND0=&h=676245374c824c6496353dbd3b109004&s=AVNPUEhUT0NFTkNSWVBUSVaufBIDH5aRP3lfDj1nTIVnY0HWcL8B9qjTUrv0ifKWea0Xj7O98ettPKjuDkEEVbI

    • https://eu-west-1.protection.sophos.com?d=allcargologistics.com&u=aHR0cDovL3d3dy5hbGxjYXJnb2xvZ2lzdGljcy5jb20v&i=NTg5OWNjNGEyZjg4YzIwZjkyOWY4YTli&t=ZGU4QmJFdFVrSW10aXh0M3pmOS9xMlVWcWlBRnhkOGJpNnBFMU95Vnl5QT0=&h=676245374c824c6496353dbd3b109004&s=AVNPUEhUT0NFTkNSWVBUSVaufBIDH5aRP3lfDj1nTIVnY0HWcL8B9qjTUrv0ifKWea0Xj7O98ettPKjuDkEEVbI

    • https://twitter.com/allcargofficial

    • https://twitter.com/ecuworldwide

    • Show all
  • BOYTINAV09494.pdf
    .pdf
  • email-html-2.txt
    .html
  • email-plain-1.txt
  • image002.png
    .png
  • image003.jpg
    .jpg
  • image004.jpg
    .jpg
  • image005.jpg
    .jpg
  • image006.jpg
    .jpg
  • image007.jpg
    .jpg
  • image018.png
    .png
  • image019.png
    .png
  • image020.jpg
    .jpg
  • image021.jpg
    .jpg
  • image022.jpg
    .jpg
  • image023.jpg
    .jpg
  • image024.jpg
    .jpg
  • image025.png
    .png
  • image026.jpg
    .jpg
  • image027.jpg
    .jpg
  • image028.jpg
    .jpg