Static task
static1
Behavioral task
behavioral1
Sample
email (16).eml
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
email (16).eml
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
email-html-1.txt
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
email-html-1.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
message_v4.rpmsg
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
message_v4.rpmsg
Resource
win10v2004-20241007-en
General
-
Target
email (16).eml
-
Size
807KB
-
MD5
7e50d5106dc4dc4b45abe58c0676c31f
-
SHA1
a6fedf5581877b5bcfa07d2bbeb8bd495d6ffad7
-
SHA256
b4616bae89e29fdbff3d7ce8b2c23bac4ac5c79706ed1374059231a6e4f5513e
-
SHA512
4f415cf6922ebe9b0eeadd688a84def528bc59580d6676689eb434f9e9294752f2cf6b42bc5e0e0fed985a48d24d7065c8e4e533dc1d2f69abd4dd7bef2cf562
-
SSDEEP
12288:O4RStbzBqslIZMNYXkdjLk2Fy3Qtrw4Bg6A08vUCoS5FLGSXRE2lcAc3net:j+DaiYXIEWtw4Bg6A08WSnNBEvH3et
Malware Config
Signatures
Files
-
email (16).eml.eml
-
https://go.microsoft.com/fwlink/?Linkid=844050
-
https://go.microsoft.com/fwlink/p/?linkid=857875
-
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=ncr*2bphishing*40service-now.com&senderemailaddress=Jkragel*40MISSIONGROVECHURCH.COM&senderorganization=AwGJAAAAAoUAAAADAQAAAJ66GqSybRVAhNfiVScZX0RPVT1NaXNzaW9uR3JvdmVDaHVyY2gub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjEzQTAwNSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NoZ6WfmrEYkK3xu6JKMJc60NOPUNvbmZpZ3VyYXRpb24sQ049TWlzc2lvbkdyb3ZlQ2h1cmNoLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIxM0EwMDUsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE*3d&messageid=*3cc8262f6a0b04465794410439b6a31328*40DS0PR15MB5528.namprd15.prod.outlook.com*3e&cfmRecipient=SystemMailbox*7bD0E409A0-AF9B-4720-92FE-AAC869B0D201*7d*40MissionGroveChurch.onmicrosoft.com&consumerEncryption=false&senderorgid=50f2126b-29cd-4a12-897a-08e238051b5b&urldecoded=1&e4e_sdata=rfAnwd9DYCv5*2f46GjpNWnd*2bUA3dz9mSbIumUWniltGUn41rYYRdK9nroJMKFeFWKKn1s6xO7a4ipFb8YFhXybutj5QdWLOu*2br5pTkY2NRe8DWytFaldWVEcuotFCrNYejoCd6MX0WZblldNfHDOth5uDwK2ivRhTmHtqZJrkNrY*2fIXjYRPiOzGFUzWpC*2bUyPbIn26Hk97eDBBrmSRJxC7H951XqUEEkuKN6JJImA3XGg*2bJUL0MZkFsdAvBDWgZuJ*2fpWB1UqB3rSi8XuTNFPIGS4Wf*2fKni7H3Y4TSXRn3Xw5ihTFyfHXOCx8aGTsDBM*2bzfWyPwlRn5n7QjwuBJk7IXA*3d*3d
-
-
email-html-1.txt
-
message_v4.rpmsg