attachment20260929-1092870-fml2of[.]zip

resource	yara_rule
static1/unpack001/Cofense_Onbording/self-guided-new-hire-setup - mot.pdf	pdf_with_link_action

attachment20260929-1092870-fml2of.zip

SHA256 7590ec87d3819d690daf9b70ea23d6ddee43b5ddc1fbc210bba077022a0fd200
MD5 86a4623261055f14c21da3085f79e39b
SHA1 2b6f65d529cec6d9320afaf351033ca09bedb9c6
SHA512 528a2a49eec8ab211a7c3b79061b47f875ea175ca8e8e5d1fc0f30e705e37f5f5ff96046e6deb2d898f09adcda392be02fbac0fe44cc3c205e325b3a8b3843ba
SSDEEP 24576:nv9SlTb8yJpAIkh7BWj7h5u85HazdmDALfvXmrkv3bAL/3W8g0xtw1wh/X3gFwHJ:nV2pAth7Bi75Hap7b/jbCNHtTh/AaxT
TLSH
T13C753394B544F5D1C32C2F32E284845683AB5C945BFF1792BACEA8530BFCAE5AF46431
MD5 SHA1 SHA512 SSDEEP TLSH

Cofense_Onbording/COFENSE GLOBAL CODE OF CONDUCT_12-30-22_Final.pdf

SHA256 5733042a7cb89c2b271e3248af42a1085bc6058f2712f1fb7487dd583dc6672b
MD5 0f4ffb439a2b0fd68479d417242e455a
SHA1 87a70cfd781fe0cd366ab5a2795ab7ca20269e0f
SHA512 4d89eced5c5d4d2e7fd5c71b5c3b33355e749cf107b2518b5e971ab5760ff5022f24b7a129c1de77c37df05be721f9cdad58afeddea57a20e0a49971db8e3860
SSDEEP 3072:Yk2RWutrv7gB3+qHbIwcd4S8nguPlqFFpLyEw5nDzBQD2jniF1P/pIV2YA5Q7:Yk2db8B33tcd4SIPlq93w5fBQajiFl/g
TLSH
T1DC041219A6D6B8AC4157B3253B6B0B414E8F88DB1A4F34D63A4C81C44721DA7F3B0DBB
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file http://Cofense.com
file https://cofense.ethicspoint.com
file https://cofense.ethicspoint.com/

Cofense_Onbording/Cofense Global Export_Sanctions_AML Policy_Final 12-2022.pdf

SHA256 9ba9e3340c98352f4cde939781e6f6591cfb30937c5e8c849e5f8b6bdedf85df
MD5 8d179ea36e4fd2e3f5fb183a738189f3
SHA1 d8cde154888c453824fdff04669aef83ac2cd390
SHA512 3f627b8922fc697c80302c4dc3c0e495b4c6eda6693c89c09b1f4e7ff56de340325a70de2539e3d2784c24b765073b88173efdda03709bf5b7b6c4c9538ac706
SSDEEP 6144:egCIlkn1rXUUwuPAmtpAsB8BgYhUbRZBIr:Q6WJP1pAsFZBIr
TLSH
T15F2412CC5D52BCCD80957924631E5AE18DC780F9660FA85536CCCAC94F02EA6FAA44FF
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file http://Cofense.com
file https://www.bis.doc.gov/index.php/enforcement/oee/compliance/23-compliance-a-training/51-red-flag-indicators
file https://www.bis.doc.gov/index.php/enforcement/oee/compliance/23-compliance-a-training/51-red-flag-indicators,
file mailto:[email protected]

Cofense_Onbording/Cofense Global Gifts and Entertainment Policy_Final - 12-2022.pdf

SHA256 43965948f87fedea2466f22a68af922966e6938b4c618a130b6058a307bad5fe
MD5 17317572258a7ef2d6420140a280044b
SHA1 4700ece8c48809c9c139689309153ee6df811752
SHA512 d00e0576294c13eb48f0db01bc5e4ae64af0dedd80d12e06ec5dfe2b8fc1c2eba67b8fd90ec8b9170cd5ca9386db9445ffa1f07737ff7de0bd608a85554049aa
SSDEEP 3072:2vx/ODFF7PavjtXsBGNMBxpzeJnoL/24kSzVJp5Se2CdOW3uyzO6Js:cUFLa5cwIpzeJnoL/TGe2CdOUO6Js
TLSH
T193E312485F25EEA884C92E21770C5B82F29761FBC00CE817BAED87C60716DE6D455C7B
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file http://Cofense.com
file mailto:[email protected]

Cofense_Onbording/CofenseData.txt

SHA256 17d864189669842c983f40ee8552b287c72f3e6817edd34bc7b43d5e04f31f5e
MD5 1ed0114bca23d2cc05875270cc5de9a3
SHA1 a9fe0ce2cd1c6886768dda1c364666788ab2c362
SHA512 d30c72e9de182f498d768fac0221be83ce88b96a78857b6ce59d1240e28cee418510bfe848eb3d252611ad958b0039803e1cb6f3479086f612030ffc286986cd
MD5 SHA1 SHA512

Cofense_Onbording/Global VPN v4.zip

SHA256 9b0e16f4ac45fecce0d52d812318d9a9ec43eea0e703e9dd238d6047d5af2cfb
MD5 551f0d663079d52e14bbbde4b4d7cdec
SHA1 89c757d53606936d528de51c85ddff00b992cfee
SHA512 439040d794d6def02cf5baaa0e87b116cd476dcc8c660525751859b7778eb843f8570ba64e685d741d7a18659c8fa773500a438afd4763c426287dd6669cb270
SSDEEP 96:bFh6TQlsGMIBXfD7gRSPKwh6TQlsGMIBXftci4WiStiC:bz60nbq260nOiniStR
TLSH
T1B5910A744B8D9A54C800B378C02BE7D324118666BBD9D8923803B875165FFA92E5729F
MD5 SHA1 SHA512 SSDEEP TLSH

Global VPN - Full Tunnel v4/ca.crt

SHA256 84e3bede2aea4b4fd115e4038d974cde9da79f195202a4114a458b608714e12b
MD5 e083c5bd9488e98f789751c4e7737813
SHA1 306bbacdf0daa67b0ebc7574bc9cec5472378d53
SHA512 50c7552a8af7dc661d55807813a0f12a343e141f7bc679f596e7e8398150044fcf1345c2dc9e49e8a30d1622fa0081e7f29eee8cbe31d8a9fc954bfa294a9c4f
TLSH
T1A331B7DBAFA0900F058BD4D4E2BE03182A641167EDD938B30C867C95CF086C9975F2A5
MD5 SHA1 SHA512 TLSH

Global VPN - Full Tunnel v4/config.conf

SHA256 99dbe752f22eaf7637d20903c3663b9b402b865712355cc22a1e704fbfa24385
MD5 398b1191c7430a5e63cc182b2c32eebd
SHA1 f3354f3d695829507e59e465a88ea614d609d8a0
SHA512 965fb6dbc9610c9a53965581d2441cfd683e29cd5fdf2eb74323be8d421604a038abec4c65dce216f1037d0543908ce4a3bf22868ce4308e1b527b373d0fafc6
TLSH
T19DF097795A2C843A536C3A78AA20E2350BCF081A2E1B04B288CB0BA42920BDAD015872
MD5 SHA1 SHA512 TLSH

Global VPN - Full Tunnel v4/ta.key

SHA256 11542046ff465e3b1b22e169ae584e138b64f89f0be5ea31992e99c7cacb7368
MD5 200e5cf2c8a8f4ac4a02b7135ddea813
SHA1 f47e921c116a2aa305f81bf0034f8d9965852d5d
SHA512 91e0aaedff2e67cea1f4283aaaf62ecf19cc89768e56f72d11aa2974f9d6ffb0be8a2e7832066d92082a21fb030d5651c2fd74c6c89ec4234c7974fd6ed2a1e6
TLSH
T14F012367FEA8E491CD4DD4D37FD24636C73B5A01258D642340EA32032AB1B917B4CD64
MD5 SHA1 SHA512 TLSH

macos

Global VPN - Split Tunnel v4/ca.crt

SHA256 84e3bede2aea4b4fd115e4038d974cde9da79f195202a4114a458b608714e12b
MD5 e083c5bd9488e98f789751c4e7737813
SHA1 306bbacdf0daa67b0ebc7574bc9cec5472378d53
SHA512 50c7552a8af7dc661d55807813a0f12a343e141f7bc679f596e7e8398150044fcf1345c2dc9e49e8a30d1622fa0081e7f29eee8cbe31d8a9fc954bfa294a9c4f
TLSH
T1A331B7DBAFA0900F058BD4D4E2BE03182A641167EDD938B30C867C95CF086C9975F2A5
MD5 SHA1 SHA512 TLSH

Global VPN - Split Tunnel v4/config.conf

SHA256 13d68ea4595036b8b05893212b369cfd6a99fcf26ad513acbdcbc1ceca6d18d6
MD5 05bc95801d15d147f9a9a84e11c8f4ed
SHA1 8508f667bea4691dbc34f92dcab52fa2f5e9b80b
SHA512 dbe5cdfdbc5a6d1c1590e3be91ecf47d76e6d2cfb8d2ab68e91521537094d85a6a4163cd5af727b270b6d25ea2cbd3e9f73aa839c41ba4e7234fb8d844b0709e
TLSH
T154F0DC798A3C947753AC7A78AA20E1350BCF081A5E0B00B298CB0FE42930BDEE015873
MD5 SHA1 SHA512 TLSH

Global VPN - Split Tunnel v4/ta.key

SHA256 c6ae569b946e49b56225b3570dd7db582fa11d8c8e27d891e6d7d3433cf17c04
MD5 aa0aad8a42129103d08d2bcf3ee82368
SHA1 d5de9134677705bc650768b25e73412354aa0593
SHA512 27a5a86f132d44c21063907e11996917aad38dae25539c7c95fc218feb3fd1b478cc01c41bbd8d81f6e9e07d1f4284af062964aa5730747f4207fce1a2488a04
TLSH
T16701FE079FD5CE07887CE71BE5260517CE1A056B22C85E07607281403C66585EB8EC34
MD5 SHA1 SHA512 TLSH

macos

Cofense_Onbording/Global VPN v4/Global VPN - Full Tunnel v4/ca.crt

SHA256 84e3bede2aea4b4fd115e4038d974cde9da79f195202a4114a458b608714e12b
MD5 e083c5bd9488e98f789751c4e7737813
SHA1 306bbacdf0daa67b0ebc7574bc9cec5472378d53
SHA512 50c7552a8af7dc661d55807813a0f12a343e141f7bc679f596e7e8398150044fcf1345c2dc9e49e8a30d1622fa0081e7f29eee8cbe31d8a9fc954bfa294a9c4f
TLSH
T1A331B7DBAFA0900F058BD4D4E2BE03182A641167EDD938B30C867C95CF086C9975F2A5
MD5 SHA1 SHA512 TLSH

Cofense_Onbording/Global VPN v4/Global VPN - Full Tunnel v4/config.conf

SHA256 99dbe752f22eaf7637d20903c3663b9b402b865712355cc22a1e704fbfa24385
MD5 398b1191c7430a5e63cc182b2c32eebd
SHA1 f3354f3d695829507e59e465a88ea614d609d8a0
SHA512 965fb6dbc9610c9a53965581d2441cfd683e29cd5fdf2eb74323be8d421604a038abec4c65dce216f1037d0543908ce4a3bf22868ce4308e1b527b373d0fafc6
TLSH
T19DF097795A2C843A536C3A78AA20E2350BCF081A2E1B04B288CB0BA42920BDAD015872
MD5 SHA1 SHA512 TLSH

Cofense_Onbording/Global VPN v4/Global VPN - Full Tunnel v4/ta.key

SHA256 11542046ff465e3b1b22e169ae584e138b64f89f0be5ea31992e99c7cacb7368
MD5 200e5cf2c8a8f4ac4a02b7135ddea813
SHA1 f47e921c116a2aa305f81bf0034f8d9965852d5d
SHA512 91e0aaedff2e67cea1f4283aaaf62ecf19cc89768e56f72d11aa2974f9d6ffb0be8a2e7832066d92082a21fb030d5651c2fd74c6c89ec4234c7974fd6ed2a1e6
TLSH
T14F012367FEA8E491CD4DD4D37FD24636C73B5A01258D642340EA32032AB1B917B4CD64
MD5 SHA1 SHA512 TLSH

macos

Cofense_Onbording/Global VPN v4/Global VPN - Split Tunnel v4/ca.crt

SHA256 84e3bede2aea4b4fd115e4038d974cde9da79f195202a4114a458b608714e12b
MD5 e083c5bd9488e98f789751c4e7737813
SHA1 306bbacdf0daa67b0ebc7574bc9cec5472378d53
SHA512 50c7552a8af7dc661d55807813a0f12a343e141f7bc679f596e7e8398150044fcf1345c2dc9e49e8a30d1622fa0081e7f29eee8cbe31d8a9fc954bfa294a9c4f
TLSH
T1A331B7DBAFA0900F058BD4D4E2BE03182A641167EDD938B30C867C95CF086C9975F2A5
MD5 SHA1 SHA512 TLSH

Cofense_Onbording/Global VPN v4/Global VPN - Split Tunnel v4/config.conf

SHA256 13d68ea4595036b8b05893212b369cfd6a99fcf26ad513acbdcbc1ceca6d18d6
MD5 05bc95801d15d147f9a9a84e11c8f4ed
SHA1 8508f667bea4691dbc34f92dcab52fa2f5e9b80b
SHA512 dbe5cdfdbc5a6d1c1590e3be91ecf47d76e6d2cfb8d2ab68e91521537094d85a6a4163cd5af727b270b6d25ea2cbd3e9f73aa839c41ba4e7234fb8d844b0709e
TLSH
T154F0DC798A3C947753AC7A78AA20E1350BCF081A5E0B00B298CB0FE42930BDEE015873
MD5 SHA1 SHA512 TLSH

Cofense_Onbording/Global VPN v4/Global VPN - Split Tunnel v4/ta.key

SHA256 c6ae569b946e49b56225b3570dd7db582fa11d8c8e27d891e6d7d3433cf17c04
MD5 aa0aad8a42129103d08d2bcf3ee82368
SHA1 d5de9134677705bc650768b25e73412354aa0593
SHA512 27a5a86f132d44c21063907e11996917aad38dae25539c7c95fc218feb3fd1b478cc01c41bbd8d81f6e9e07d1f4284af062964aa5730747f4207fce1a2488a04
TLSH
T16701FE079FD5CE07887CE71BE5260517CE1A056B22C85E07607281403C66585EB8EC34
MD5 SHA1 SHA512 TLSH

macos

Cofense_Onbording/self-guided-new-hire-setup - mot.pdf

SHA256 6a579d1e4523e3f258a1fad0ebbd43ce6e1ebfd4482a776924a143f2b19883fe
MD5 591fba4fa41199dbe192b26b8152baa6
SHA1 9bfdae93bb404db8b9f880a1d473bf97615fe738
SHA512 bf6e27f7ac9cd153e45f65638813161d0b1098dcf21ab36822cc9d9c243ac00b22d36a296af5038d1c5c68e35be70aea1bfd02d684a6c65166b1f8cf8ba78402
SSDEEP 24576:wyuafeg3q3b8e4cMrgVftsbLFccccc27t:w/am45JmsbLxt
TLSH
T11235E00388186DCFD22943F47F0B3C6A7A5EB265E0C566F6322CCF872750E6A5C4B55A
MD5 SHA1 SHA512 SSDEEP TLSH

HTTP links in PDF interactive object

Detects HTTP links in interactive objects within PDF files.

pdf link

Extracted URLs

file https://1password.com/
file https://1password.com/downloadsen-USAdditional
file https://cofenseit.zendesk.com
file https://employeesupport.corp.cofense.com/
file https://employeesupport.corp.cofense.com/portal/kb?text=onedrive&entity=articles&id=22
file https://jira.corp.phishme.com/projects/PRODENG
file https://jira.corp.phishme.com/projects/PRODENGen-GB
file https://myapplications.microsoft.com/
file https://myapps.microsoft.com/
file https://mysignins.microsoft.com/security-info
file https://mysignins.microsoft.com/security-infoen-USen-USClick
file https://phishmeinc.sharepoint.com
file https://phishmeinc.sharepoint.com/
file https://portal.cofense.com/
file https://www.sparklabs.com/viscosity/download/en-GBen-GBa.
file https://youtu.be/FFQszYALS_A
file https://youtu.be/FFQszYALS_Aen-USSlack-provides
file mailto:[email protected]
Show all

Sharing

General

Malware Config

Signatures

File Explorer

attachment20260929-1092870-fml2of.zip

Cofense_Onbording/COFENSE GLOBAL CODE OF CONDUCT_12-30-22_Final.pdf

Extracted URLs

Cofense_Onbording/Cofense Global Export_Sanctions_AML Policy_Final 12-2022.pdf

Extracted URLs

Cofense_Onbording/Cofense Global Gifts and Entertainment Policy_Final - 12-2022.pdf

Extracted URLs

Cofense_Onbording/CofenseData.txt

Cofense_Onbording/Global VPN v4.zip

Global VPN - Full Tunnel v4/ca.crt

Global VPN - Full Tunnel v4/config.conf

Global VPN - Full Tunnel v4/ta.key

Global VPN - Split Tunnel v4/ca.crt

Global VPN - Split Tunnel v4/config.conf

Global VPN - Split Tunnel v4/ta.key

Cofense_Onbording/Global VPN v4/Global VPN - Full Tunnel v4/ca.crt

Cofense_Onbording/Global VPN v4/Global VPN - Full Tunnel v4/config.conf

Cofense_Onbording/Global VPN v4/Global VPN - Full Tunnel v4/ta.key

Cofense_Onbording/Global VPN v4/Global VPN - Split Tunnel v4/ca.crt

Cofense_Onbording/Global VPN v4/Global VPN - Split Tunnel v4/config.conf

Cofense_Onbording/Global VPN v4/Global VPN - Split Tunnel v4/ta.key

Cofense_Onbording/self-guided-new-hire-setup - mot.pdf

Extracted URLs