General

  • Target

    FW_ Electronic BOD Meeting_ Amendments to 2026 & 2027 contracts with The Hythe and new 2028 Contract.eml

  • Size

    971KB

  • MD5

    85d84fd787eb7229780921f8a8cfafd6

  • SHA1

    2bde2bf1bdbb997ea712b325a11002ff8a82c089

  • SHA256

    f8d7222d91a42edc2c08ce97d77ea77690381b507d7c0f08b1d9cbc23a8ec1fc

  • SHA512

    8beaeeeb345344e3b69d6d633799066cbef883d31e52ba746dde08df1c487ad556427b33bef9315d9309c692a8a992aec918d14dcfc78a823bbd018f909c26aa

  • SSDEEP

    24576:MNFUeQHpFgdWqCfrz4zTrQLBKg/lXpxpRU:Ve0cdWHIsFKCq

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • FW_ Electronic BOD Meeting_ Amendments to 2026 & 2027 contracts with The Hythe and new 2028 Contract.eml
    .eml
    • http://www.strategicsiteselection.com/

    • https://linkprotect.cudasvc.com/url?a=

    • https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.thehythevail.com%2f&c=E,1,sWFghogP180heabS0303tHIoSNHZLeO_w32Q6p2PDy6aRUN9kHx3aIUetoI_Nb5FgLO44dfcvfOVXyGyPDE8mp4scPUgIVdE9BQiihIcKw3gJ7bX69Q,&typo=1

    • https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fthehythevail.com&c=E,1,7YWFfhti9zF7LFeFw0HLt1lfYV1r0F8JKcs6Laj7rsRsPKgdORT2qifYVEG1Tpn4pN84sXCXM-FN5dakt8chLqFhXaMRy0V6Zr-w026pT0lIuS6ERQM7vjE-ECw,&typo=1&ancr_add=1

    • https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.hotelcliocherrycreek.com%2f&c=E,1,7eVnIRaxEH9NI_dSkGoUzoM1tBhSTogxkl1boHFciO6OlP7tPX_hNAB0TSW9JvVumlyCY6rvbUA5Log5zQ0yJ2y0b9kWUqr7I0Hunc7-g-k,&typo=1

    • https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.hotelcliocherrycreek.com%2f&c=E,1,S3neGJu3DdXtsWX_6PsrVWa8txrFtSKpGuD5X2DpDHJQfsRXuQ6p3SOE8UCit-tHnRsQXv64UiQk2o9GWP28T-VPyXcDCiCEb1UMuZAAhj_fcXE060PE&typo=1

    • https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.hotelcliocherrycreek.com%2f&c=E,1,TC_KMYZBGSLQ4HDWJRaRt5hOoN8wtEDfMpqCJ5I-hR2dKThCLas-C6G9HNHIkKroBM3uyNff3mdgP7UVI_HoR-M9DRFM_sCdKZaDfM1JJliif_Qb6ZAoqV2ALWRL&typo=1

    • https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.thehythevail.com&c=E,1,JRjFD4YFiuJ24ONinUrPeef-cXEcgIosuqZ1a2OzOblv1UNl5mBgTnjVaDr0VaUcq9oTTn9wOCnC1OhYh7O_KlduxOuGqjgGrZ-x5PIVb-k5yIbvuBIiJsS9yTRX&typo=1&ancr_add=1

    • https://lp.constantcontactpages.com/sv/z7Wd0Wu/SSSfeedback

    • Show all
  • 01232028_CR2_NAEMA East Meets West Meeting.pdf
    .pdf
    • http://TheHytheVail.com

    • http://naema.com

    • http://strategicsiteselection.com

    • https://www.marriott.com/loyalty/terms/default.mi

    • https://www.marriott.com/loyalty/terms/default.mien-US

  • 02052027_ADD_NAEMA East Meets West Meeting.pdf
    .pdf
    • http://TheHytheVail.com

    • http://naema.com

  • 02062026_ADD_NAEMA East Meets West Meeting.pdf
    .pdf
    • http://TheHytheVail.com

    • http://naema.com

  • email-html-2.txt
    .html
  • email-plain-1.txt
  • image001.png
    .png
  • image002.png
    .png
  • image003.png
    .png
  • image004.png
    .png
  • image005.png
    .png
  • image006.png
    .png
  • image007.png
    .png
  • image008.png
    .png