attachment20260930-1253-cpa373[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
attachment20260930-1253-cpa373.zip
Size 17KB
Sample260930-gdvtqaxtdv
SHA256 a644d10b07d190f436ab080a228e64b52abb556febb62e339725326baeef986d
MD5 a50ec3712e9ec2f55088866143006319
SHA1 795a918591d70ea51b92d64f81bde2ddc6e0ca99
SHA512 253743394591e6c26106f67127a708a7f1ff64d4425e66f2a361d8a912e898b9eb08ebe9dbfa7cb82fc6e81cf95bb7dd1d5a0c38b6c1e3b4cf007f8823683675
SSDEEP 384:XIeUMVIffKfbyGr7+s2XQ5jRszxuL5tVqsAGRJ9+FTG46TrOhZL5qOTG:YeUMVIfyV7+s2Xq8496dCJUeOh5VG
TLSH
T17D82D0975A8208D4C9361BF270FF3F38A9D00599A12E76DB5069DCE14823EC6C763860
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

attachment20260930-1253-cpa373.zip

.zip 17KB
[External] Webcasting consulting partner.eml

.eml 48KB
email-html-2.txt

.html 20KB
email-plain-1.txt

3KB

attachment20260930-1253-cpa373.zip

SHA256 a644d10b07d190f436ab080a228e64b52abb556febb62e339725326baeef986d
MD5 a50ec3712e9ec2f55088866143006319
SHA1 795a918591d70ea51b92d64f81bde2ddc6e0ca99
SHA512 253743394591e6c26106f67127a708a7f1ff64d4425e66f2a361d8a912e898b9eb08ebe9dbfa7cb82fc6e81cf95bb7dd1d5a0c38b6c1e3b4cf007f8823683675
SSDEEP 384:XIeUMVIffKfbyGr7+s2XQ5jRszxuL5tVqsAGRJ9+FTG46TrOhZL5qOTG:YeUMVIfyV7+s2Xq8496dCJUeOh5VG
TLSH
T17D82D0975A8208D4C9361BF270FF3F38A9D00599A12E76DB5069DCE14823EC6C763860
MD5 SHA1 SHA512 SSDEEP TLSH

[External] Webcasting consulting partner.eml

SHA256 6a97abb7d8543aed5c09cac78e094ea0fa07607930fb66e12d2e04d544ae9995
MD5 4715056d4a5bf7be5352b20453e8001b
SHA1 0d20161bdf2812aaab159becb9e6306dea88c642
SHA512 6ce7c85fc89f2b7280ec1781dfe67c8299f3051dc758b6bb2cc323e025e55bc6319200735e3c2f9d49aa2e09aadf83bf73ccf69fe1b85d6af4c0b8ff2ff4353f
SSDEEP 1536:6pWUF83nKU99eSeRPefeJeLDeePQ0Bjh86yOAN8a1mfJN1VmfTNx27d7/Ur+vp3q:uyXK0GgEL5
TLSH
T194232A2EAA2704F301F982F7F007BB6894411E0ED35766F1F67F76246C8AD193A8568D
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

[email protected]

From

[email protected]

Date

Thu, 10 Mar 2022 16:01:39 -0600

Subject

[External] Webcasting consulting partner

Content-Type

multipart/related; boundary="----=_NextPart_000_0006_01D8349A.31C631B0"

Received-Spf

PermError (protection.outlook.com: domain of xyvid.com used an invalid SPF mechanism)

X-Mailer

Microsoft Outlook 16.0

Message-Id

<BL0PR05MB4674ABE150D646EF9B50325BDA0B9@BL0PR05MB4674.namprd05.prod.outlook.com>

Extracted URLs

file http://twitter.com/xyvid_inc
file http://twitter.com/xyvid_inc__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c6WX--QMs$
file http://www.facebook.com/xyvid
file http://www.facebook.com/xyvid__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c6l0SMbTY$
file http://www.linkedin.com/company/xyvid-inc
file http://www.linkedin.com/company/xyvid-inc__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c6aWtp5nU$
file http://www.xyvid.com/
file http://www.xyvid.com/__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c6D6WBiIk$
file https://calendly.com/jcos-1
file https://calendly.com/jcos-1__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c6NfjHe_s$
file https://twitter.com/Xyvid
file https://twitter.com/Xyvid__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c60lSf3a4$
file https://urldefense.com/v3/__
file https://www.facebook.com/Xyvid
file https://www.facebook.com/Xyvid__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c6CLTv5Fg$
file https://www.filemail.com/incoming/2196476830
file https://www.filemail.com/incoming/2196476830__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c6JhinTnc$
file https://www.linkedin.com/company/xyvid-inc/
file https://www.linkedin.com/company/xyvid-inc/__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c6spsOYxA$
file https://xyvid.com/demo-login/
file https://xyvid.com/demo-login/__;!!MtjI3PGcDg!Yboq-2BSbfEqHGdEXX-H1GiLtWHBIbuUtNLnowvVLJFfMDAFtd54PZLVt0c6s2z1wc8$
Show all