Behavioral task
behavioral1
Sample
01232028_CR2_NAEMA East Meets West Meeting.pdf
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
01232028_CR2_NAEMA East Meets West Meeting.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
02052027_ADD_NAEMA East Meets West Meeting.pdf
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
02052027_ADD_NAEMA East Meets West Meeting.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
02062026_ADD_NAEMA East Meets West Meeting.pdf
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
02062026_ADD_NAEMA East Meets West Meeting.pdf
Resource
win10v2004-20241007-en
General
-
Target
FW_ Electronic BOD Meeting_ Amendments to 2026 & 2027 contracts with The Hythe and new 2028 Contract.eml
-
Size
971KB
-
MD5
85d84fd787eb7229780921f8a8cfafd6
-
SHA1
2bde2bf1bdbb997ea712b325a11002ff8a82c089
-
SHA256
f8d7222d91a42edc2c08ce97d77ea77690381b507d7c0f08b1d9cbc23a8ec1fc
-
SHA512
8beaeeeb345344e3b69d6d633799066cbef883d31e52ba746dde08df1c487ad556427b33bef9315d9309c692a8a992aec918d14dcfc78a823bbd018f909c26aa
-
SSDEEP
24576:MNFUeQHpFgdWqCfrz4zTrQLBKg/lXpxpRU:Ve0cdWHIsFKCq
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/01232028_CR2_NAEMA East Meets West Meeting.pdf pdf_with_link_action
Files
-
FW_ Electronic BOD Meeting_ Amendments to 2026 & 2027 contracts with The Hythe and new 2028 Contract.eml.eml
-
http://www.strategicsiteselection.com/
-
https://linkprotect.cudasvc.com/url?a=
-
https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.thehythevail.com%2f&c=E,1,sWFghogP180heabS0303tHIoSNHZLeO_w32Q6p2PDy6aRUN9kHx3aIUetoI_Nb5FgLO44dfcvfOVXyGyPDE8mp4scPUgIVdE9BQiihIcKw3gJ7bX69Q,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fthehythevail.com&c=E,1,7YWFfhti9zF7LFeFw0HLt1lfYV1r0F8JKcs6Laj7rsRsPKgdORT2qifYVEG1Tpn4pN84sXCXM-FN5dakt8chLqFhXaMRy0V6Zr-w026pT0lIuS6ERQM7vjE-ECw,&typo=1&ancr_add=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.hotelcliocherrycreek.com%2f&c=E,1,7eVnIRaxEH9NI_dSkGoUzoM1tBhSTogxkl1boHFciO6OlP7tPX_hNAB0TSW9JvVumlyCY6rvbUA5Log5zQ0yJ2y0b9kWUqr7I0Hunc7-g-k,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.hotelcliocherrycreek.com%2f&c=E,1,S3neGJu3DdXtsWX_6PsrVWa8txrFtSKpGuD5X2DpDHJQfsRXuQ6p3SOE8UCit-tHnRsQXv64UiQk2o9GWP28T-VPyXcDCiCEb1UMuZAAhj_fcXE060PE&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.hotelcliocherrycreek.com%2f&c=E,1,TC_KMYZBGSLQ4HDWJRaRt5hOoN8wtEDfMpqCJ5I-hR2dKThCLas-C6G9HNHIkKroBM3uyNff3mdgP7UVI_HoR-M9DRFM_sCdKZaDfM1JJliif_Qb6ZAoqV2ALWRL&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.thehythevail.com&c=E,1,JRjFD4YFiuJ24ONinUrPeef-cXEcgIosuqZ1a2OzOblv1UNl5mBgTnjVaDr0VaUcq9oTTn9wOCnC1OhYh7O_KlduxOuGqjgGrZ-x5PIVb-k5yIbvuBIiJsS9yTRX&typo=1&ancr_add=1
-
https://lp.constantcontactpages.com/sv/z7Wd0Wu/SSSfeedback
-
https://www.facebook.com/StrategicSiteSelection/
-
https://www.facebook.com/thehythevail/
-
https://www.instagram.com/jodiclair_sss/
-
https://www.instagram.com/thehythevail/
-
https://www.linkedin.com/company/strategic-site-selection/
- Show all
-
-
01232028_CR2_NAEMA East Meets West Meeting.pdf.pdf
-
http://TheHytheVail.com
-
http://naema.com
-
http://strategicsiteselection.com
-
https://www.marriott.com/loyalty/terms/default.mi
-
https://www.marriott.com/loyalty/terms/default.mien-US
-
-
02052027_ADD_NAEMA East Meets West Meeting.pdf.pdf
-
http://TheHytheVail.com
-
http://naema.com
-
-
02062026_ADD_NAEMA East Meets West Meeting.pdf.pdf
-
http://TheHytheVail.com
-
http://naema.com
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png
-
image002.png.png
-
image003.png.png
-
image004.png.png
-
image005.png.png
-
image006.png.png
-
image007.png.png
-
image008.png.png