Static task
static1
Behavioral task
behavioral1
Sample
Have You Checked Your Eligibility for a Tax Refund Yet.msg
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Have You Checked Your Eligibility for a Tax Refund Yet.msg
Resource
win10v2004-20240802-en
General
-
Target
Have You Checked Your Eligibility for a Tax Refund Yet.msg
-
Size
92KB
-
MD5
cf538d60eabdc2e400b98c98a3ca818f
-
SHA1
083b726ca995a8c58b860791d1cce6c56c76962c
-
SHA256
037f63fdabc216bf2d4cfcdaf3ecdf59c5772135c421479c76c129ca2d901bc1
-
SHA512
eac72a74cd4e953475537b18c2092d41938305ec178b74bb7ecc181e975d941f990a96e4d3234c2b3a42b0000babb6bbc7e14bfd71f35958b721b8b689a8baa6
-
SSDEEP
1536:bcfSnmE3aOnNw2HBZ5ITkxHfLjGWQWKUPqT+O:bcaQOn3BZ5zxHXUUPrO
Malware Config
Signatures
Files
-
Have You Checked Your Eligibility for a Tax Refund Yet.msg.msg
-
http://business3.theinsurancequoter.com
-
http://email.business3.theinsurancequoter.com/c/eJyEks2K2zAUhZ_G2mmQZFm2F1oE2oRuhimFZjqboJ_rWBNLciTZIX364lDKLAa6FedwxPddc3JWjs_q5y9hjpfddzi-Xs9e04ysVIPW9YBs9MoFqZfsAuRcP5URXMhLUsHAdYkF0pOJHoGkLWtbUdcdReCVm04eclZn2Da-_d7dD761Y1JX8mN9-eIOh7-pcp9B3mK6DFO8fXjbanRQfLCaYw6dxrwjBuua9LhrOmZ7oqFW9GMlF5i3nlC9GBgYTETfYd4LihVnDRZ06FrKhbFNhyCsLsXgIRQ5p2gXU1wMaJTQC6LrgdaCQkOHjtR92zecslo3vYUOOckI45QQSgQVjD41PQhKCekbUMpqVXHyX2CTHEuZc1XvKrav2F7d1AWCC2fsXbB5y1RsPye3KnPHc5ycuVdsj6b4sNa97o6Mfz0-77ka3sIUX95W5KGM0Uo1OzSnuDoLSW50zktASYJK3r3HipMEeUnv6vGPHJdkQD4oYpdXvLmAhIrclj6dKdJEf_r0boqEcvpnc5XsTwAAAP__va_OZA
-
http://email.business3.theinsurancequoter.com/c/eJyEksFv2yAUh_8ac3MFGGN84BBpS7RL1WnS0vUSPcMjpo3BAeyu--snR9vUQ6Vd0fv0Sd8Pc_JWj_fw_Yc0x5fdVzw-Xs_TwDKxGtwwNI7YOIEPeliyD5hzc1dG9CEvCYLB6xILpjsTJ4KadbzrZNMoRnACfzlNmDOccXN8-bV7O0ydHRNc6bf14ZM_HP5clbcZ9WtML-4SX9-9bRhzIJwdRC1QDbVQ1NRDQ_tatYrbng7YAHuP5ILzxknopeNoaip7VYteshoEb2vJnOqYkMa2imBYfYphwlD0nKJdTPExkFHLnhnaKmmoE5I6CrQb-sYw5awzPZfEa065YJQyKpnk7K7tUTJGad8igB2gEvS_wS56LGXOVbOr-L7i-79AgZ8J3RJs3s4qvieXeNtJPe6OXHw-3u8FuKdwiQ9PK5mwjNFqmD2ZU1y9xaS3HuclkKQR0uSfYyVowrykZ7iZc1ySQX3rVvu81lt9TKTozfShpmgTp9OHP6VoLKd_-62a_w4AAP__dxLKRQ
-
http://email.business3.theinsurancequoter.com/c/eJyEksGO2yAURb_G7BwBxgQvWERqPepmlKpSM80mwvCImRhwAHs0_frKUVXNYqRu0b266JynL87I8Vn9_MX16Xb4DqeX-9UPJCMjlR2GxiITvXJBDkt2AXJudmUEF_KSVNBwX2KBtNPRI5BkT_d73jSCIPDKTRcPOasrbBvffh_en_zejEnd8Y_1-MU9Pf1NlfcZ5FtMNzvFtw9vW41YxawZWM1ADDUTWNdDg7tatIKaDg_QKPKxkgvMW4-rjlsKusa8EzXrOKkVo23NiRV7wrg2rUAQVpdi8BCKnFM0iy4uBjRKTmlnWk1bilvT4Ea1rAWDhbBCGAsCOUkxZQRjgjnhlOzaDjghGHctKGUGVTH8X2CTHEuZc9UcKtpXtM-QVqch73y-5mAeoYr2S5pyRfupov3teMq9Ph9HNMWHOfFyOFH29fTcM2XPYYrH84o8lDEaqWaH5hRXZyDJjdB1CShJUMm711gxnCAv6VU9_pLjkjTIB8na5bXefEBCRW5Ln84UqaO_fHo7RUK5_DO6SvonAAD__wViz6g
-
http://email.business3.theinsurancequoter.com/o/eJyEkcFuGyEQhp8m3LCAZVn2wMFSW6uXKFWlOs3FmoXBJjFgA7tR-vTVWlWVQ6RcR_PPp_l-ewjOnO7h129l9y_bH7h_vB7jxCtxBvw0dZ64HCEkM801JKy127QThlTnAsnidc4Ny8bmSNDwQQyD6jrNCUYI50PEWuGIK-P7n-3bLg7uVODKfi4PX8Ju92-rvV3QvOby4s_59d1sjXEP0rtJUol6olIzS6eOjVT3WriRTdgBfx-pDS9rTsGovEBLmRo1laPiFKToqeJeD1wq63pNMC2h5BQxNXMp2c22hZzIyfSgFfLBjt4yZ71UzmnsJQilxWCtJ8EIJiRnjDPFleCbfkTFOWNjjwBugjvJPhV2zjf7-nG7F_Lr_v6bBP-UzvnhaSER2yk7A5dALiUvwWEx65fHOZFiEEoMz_lOsoJ1Ls9wu1fzXCyamw0a6kJXp1hIMyvpQ0wzNsfDh_03g-3wv5XFiL8BAAD__6bPvII
-
https://aka.ms/LearnAboutSenderIdentification
-
https://storage.googleapis.com/msgsndr/8XAW24EWNF4afZnloPZv/media/45470803-d29a-4b36-8d44-1a8298136242.jpeg
-