General
- Target RV_ Signature Request_ Docusign_ Contract Settlement Agreement_z9FFlF8j - Reference_ VVYC8s8NW1A - 6_8_2026 4_22_20 p_m_ Contact - cesar_mendizabal@banrural_com_gt.msg
- Size 106KB
- Sample260703-te8hescv2z
- SHA256 ca8e6e959a43aae73f8fd23f295407476211f4e0fd49dbca26e48afc2151683a
- MD5 9de736f9ce4bfa25dc35a750924e1da1
- SHA1 d2bfb702cb687116306c0c764396c9f5692eb612
- SHA512 2043e1c2e8a9f903d7747d2a1b7d59265e2a9240cdb739042663a97e02eda20dab6d56617343222c2681762f8b5852b14e272cdd1ce8851aea77bdb74c87fdba
- SSDEEP 1536:ESWKWJlGv88aNR2ebu7OwBqLvMdFxWSDMWgDsExOX:ExlGv8ZNR2eqLBjtDMWF
- TLSH T16AB3F1252AFA0229F373DF358BE650AB9536FC53AD14965F2095330E0672941EC62F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
RV_ Signature Request_ Docusign_ Contract Settlement Agreement_z9FFlF8j - Reference_ VVYC8s8NW1A - 6.msg
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target RV_ Signature Request_ Docusign_ Contract Settlement Agreement_z9FFlF8j - Reference_ VVYC8s8NW1A - 6_8_2026 4_22_20 p_m_ Contact - cesar_mendizabal@banrural_com_gt.msg
- Size 106KB
- SHA256 ca8e6e959a43aae73f8fd23f295407476211f4e0fd49dbca26e48afc2151683a
- MD5 9de736f9ce4bfa25dc35a750924e1da1
- SHA1 d2bfb702cb687116306c0c764396c9f5692eb612
- SHA512 2043e1c2e8a9f903d7747d2a1b7d59265e2a9240cdb739042663a97e02eda20dab6d56617343222c2681762f8b5852b14e272cdd1ce8851aea77bdb74c87fdba
- SSDEEP 1536:ESWKWJlGv88aNR2ebu7OwBqLvMdFxWSDMWgDsExOX:ExlGv8ZNR2eqLBjtDMWF
- TLSH T16AB3F1252AFA0229F373DF358BE650AB9536FC53AD14965F2095330E0672941EC62F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.