Mensajes en cuarentena (12).zip
- SHA256 3e7dbeb65deebc073962c8fb1b8e4aae4363bb2b2009052bdde6c96c4808e32b
Password
12345
Static task
static1
Behavioral task
behavioral1
Sample
989a4d58-a0f0-4541-0561-08df1e30e144/1f8303f8-f195-acef-a5b7-3e69eec14250.eml
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
989a4d58-a0f0-4541-0561-08df1e30e144/1f8303f8-f195-acef-a5b7-3e69eec14250.eml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
invite.ics
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
General
- Target Mensajes en cuarentena (12).zip
- Size 19KB
- Sample260930-xggdhavybv
- SHA256 3e7dbeb65deebc073962c8fb1b8e4aae4363bb2b2009052bdde6c96c4808e32b
- MD5 cb59823103250d13b6b257f2ce3dfea8
- SHA1 4629cdf8d0bd6dd3c6fb7b8f94e074fb8785d19f
- SHA512 4803aa8aad2e95e1ac0c22a6bc3ab3c55af45aedc114e2112f4c99d30a9cdd7e99699ef6957e0a9520385dfb67fc8c2bdd9c90256cd883a78540ecb684e5bb47
- SSDEEP 384:ly3h63HcbizOYdRGSUXFkSJBpIcg16RFMR7grAs1qwEnhiOJlE8zVEZwT4Wm:ly3h63Hcbib+SqgZ6XMN6QiOAdeTbm
- TLSH T17E92E181B17D7865F78E85F9305B00598DFAF5008E9278222AC96F48DE5FAC60F27CB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
Mensajes en cuarentena (12).zip.zip 19KB
-
989a4d58-a0f0-4541-0561-08df1e30e144/1f8303f8-f195-acef-a5b7-3e69eec14250.eml.eml 65KB
-
attachment-36KB
-
email-html-2.txt.html 35KB
-
email-plain-1.txt4KB
-
invite.ics2KB
989a4d58-a0f0-4541-0561-08df1e30e144/1f8303f8-f195-acef-a5b7-3e69eec14250.eml
- SHA256 0022b33702137a83255368e9ae6ccf9b6d3fcd51656223475a814ca0d8edb932
- MD5 44cfe377587cbe2dce3addd4204166c3
- SHA1 a2c49dbb2c4b02fb344ebcf9ee685e1b113ed8d2
- SHA512 8596252a8ff5b9f0a3f46494baaffb01ef547214b9c0e589a3918b03143693a5319edeeabb63ea5f340ae1022c44e50fdf692f91f7df38745eec526a371dc440
- SSDEEP 1536:Zv9MyOCwdzgzXzkqW1NHAWdAu0X3Pspeos4e3s7e5bomjimSYDF:8CwdMbgqW1NHAWKdX/omjnSUF
- TLSH T1E5631957AB815952853289B4F1133F6DF3201D0FD65688F0B95F3A274FC90622BE6BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
12345
Email Headers
From
Sender
Calendario de Google <[email protected]>
Reply-To
Return-Path
Date
Tue, 29 Sep 2026 13:52:18 +0000
Subject
=?UTF-8?Q?Invitaci=C3=B3n=3A_DISTRIBUCIONES_AXA_and_Florencia_De_La_?= =?UTF-8?Q?Torre_Wed_Sep_30=2C_2026_8am_=2D_8=3A30am_=28GMT=2D5=29_=28Jimena_Ricardo=29?=
Content-Type
multipart/mixed; boundary="000000000000b69a34065c9f7dcc"
Received
from BN0PR07CA0009.namprd07.prod.outlook.com (2603:10b6:408:141::8) by LV9PR13MB7622.namprd13.prod.outlook.com (2603:10b6:408:373::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.24; Tue, 29 Sep 2026 13:52:20 +0000
from BN1PEPF0001806E.namprd04.prod.outlook.com (2603:10b6:408:141:cafe::2f) by BN0PR07CA0009.outlook.office365.com (2603:10b6:408:141::8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Tue, 29 Sep 2026 13:52:20 +0000
from mail-vk1-xa47.google.com (2607:f8b0:4864:20::a47) by BN1PEPF0001806E.mail.protection.outlook.com (2603:10b6:40f:fc02::424) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Tue, 29 Sep 2026 13:52:19 +0000
by mail-vk1-xa47.google.com with SMTP id 71dfb90a1353d-5c833d4bd04so1090883e0c.3 for <[email protected]>; Tue, 29 Sep 2026 06:52:19 -0700 (PDT)
X-Received
by 2002:a05:6122:2985:b0:5bd:71b1:d5c6 with SMTP id 71dfb90a1353d-5cb0807358bmr6983299e0c.4.1790689938931; Tue, 29 Sep 2026 06:52:18 -0700 (PDT)
Received-Spf
Pass (protection.outlook.com: domain of testkokoro.com designates 2607:f8b0:4864:20::a47 as permitted sender) receiver=protection.outlook.com; client-ip=2607:f8b0:4864:20::a47; helo=mail-vk1-xa47.google.com; pr=C
Message-Id
Extracted URLs
-
file https://calendar.google.com/calendar/
-
file https://calendar.google.com/calendar/event?action=RESPOND&eid=Z2dqdXRhMGZzZGhxbm9xdDVha2g4MGI2M28gamltcmljQGVsZW1wbGVvLmNvbQ&rst=1&tok=MzQjZmxvcmVuY2lhLmRlbGF0b3JyZUB0ZXN0a29rb3JvLmNvbTA5ODIyNmE4YjMwMDdhYTU3NjlhYmIxMjg3ZDlhNGNkZGNjMTdjZTk&ctz=America%2FBogota&hl=es_419&es=0
-
file https://calendar.google.com/calendar/event?action=RESPOND&eid=Z2dqdXRhMGZzZGhxbm9xdDVha2g4MGI2M28gamltcmljQGVsZW1wbGVvLmNvbQ&rst=2&tok=MzQjZmxvcmVuY2lhLmRlbGF0b3JyZUB0ZXN0a29rb3JvLmNvbTA5ODIyNmE4YjMwMDdhYTU3NjlhYmIxMjg3ZDlhNGNkZGNjMTdjZTk&ctz=America%2FBogota&hl=es_419&es=0
-
file https://calendar.google.com/calendar/event?action=RESPOND&eid=Z2dqdXRhMGZzZGhxbm9xdDVha2g4MGI2M28gamltcmljQGVsZW1wbGVvLmNvbQ&rst=3&tok=MzQjZmxvcmVuY2lhLmRlbGF0b3JyZUB0ZXN0a29rb3JvLmNvbTA5ODIyNmE4YjMwMDdhYTU3NjlhYmIxMjg3ZDlhNGNkZGNjMTdjZTk&ctz=America%2FBogota&hl=es_419&es=0
-
file https://calendar.google.com/calendar/event?action=VIEW&eid=Z2dqdXRhMGZzZGhxbm9xdDVha2g4MGI2M28gamltcmljQGVsZW1wbGVvLmNvbQ&tok=MzQjZmxvcmVuY2lhLmRlbGF0b3JyZUB0ZXN0a29rb3JvLmNvbTA5ODIyNmE4YjMwMDdhYTU3NjlhYmIxMjg3ZDlhNGNkZGNjMTdjZTk&ctz=America%2FBogota&hl=es_419&es=0
-
file https://calendly.com/cancellations/ab9f1f1c-c63b-461b-bc05-73fb694f0027
-
file https://calendly.com/events/f68742c1-cf08-4881-ac58-0
-
file https://calendly.com/events/f68742c1-cf08-4881-ac58-099698093877/google_meet
-
file https://calendly.com/reschedulings/ab9f1f1c-c63b-461b-bc05-73fb694f0027
-
file https://google.com/
-
file https://meet.google.com/mpy-tnee-xrx?hs=224
-
file https://support.google.com/calendar/answer/37135#forwarding
-
file https://tel.meet/mpy-tnee-xrx?pin=8272333374888&hs=0
-
file https://www.google.com/maps/search/Google+Meet+(instructions+in+description)?hl=es-419
- Show all
attachment-3
- SHA256 5185f0e8bb71229c34af19012fce9b8ace572de5f06fd4d122e5094a427ab0ea
- MD5 bec90c085f0d55e8959b70049d9e95c2
- SHA1 a685eee791b50327be92d56511373928717eee5d
- SHA512 18803501d4815c0c6772dfb31a80d2ab583ad8e7ed7680f0ef569be83718be36024319a2af10a6c1856ea19c9acf1ade78f7c3ef4db030d8e78781fc1d17d398
- SSDEEP 96:EgfoOaQTOmN3ql8nNqrWkkAOAAHephH4I3z25z71QCyR315eqWW3/1Q984T1r/19:doY3qqn3c3yejYt5zZQHz5eqWkcr8ZFu
- TLSH T1A5D1D5E73FE017E35A9992F1F044731FB8661D4F9C89ADB072462E1609C50AADBE1C98
- MD5 SHA1 SHA512 SSDEEP TLSH
email-html-2.txt
- SHA256 4cc5465ab9dbef34676b1004f382b94bab143aaae9cbee15c9cedf9f3852841d
- MD5 cb3f5d0e910d1720decf5909e081eb07
- SHA1 1f0dcc61398afda45a97194b54f3c5aba75cfe46
- SHA512 bb9b46f1e19c2764eff247acc0315d8471dba48d026d656820eb81fae22c7ed46554a78ed3e3538b68ee09ee761df189a90c93b02f25743285af658bb44376ac
- SSDEEP 768:GJdYDW/5zC6loD7lC6gJ8HHeueEHb5TewHGMOeFYHp2:0eS/5zC6E7lC6gJ8HHeueEHb5TewHGMT
- TLSH T1F8F2A553D7816D254137C5B5F2627BA8E710010BDB1288F0FE9F2A27AF9446317A7BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
email-plain-1.txt
- SHA256 7128b924dc6620c6a62f186ea64ee1c35eaf822ca00b55d62230b7660b23c153
- MD5 fbf82d7a3e02e9588bbafdd204dc2add
- SHA1 3a57e1e73f32d3046c29aad3d9b7281381fe887f
- SHA512 737085b3cdb368f81c2490029c1e62b0de6ffd1b5bd69093af28b6b0692a1b3c30c7e831d5225cdae620880e81ad7a9eac37cebe32ab5d5686e6ff3b8d28c0f9
- SSDEEP 96:6kYAnc2t1VBQ2m2R0aIQR87RPuFeqZGgWf1Fh9xYJTJqA1Fqf6l:6cc2thXKnQcwFeqZGgE+NcCqil
- TLSH T15991A5EB3F815AF31EE5D1F2F501621FB5170E469D1AEEE0628E5E130AC10978ED1CA9
- MD5 SHA1 SHA512 SSDEEP TLSH
invite.ics
- SHA256 f2f9cb1e2d3fe59d8cbeedb0d4f7a42275429b260b14160c02495198a8fa8eae
- MD5 ac36918bc19f68404ebd51b52af4e8ab
- SHA1 18560c38cbfaca0b545bf117d2eb4f937638e230
- SHA512 84e150f807a49cd28da4924be234f35e04a3b044e10c5880de751216c8da0ddd94c358846f9dd8daffae593416cca9a965e9787b2edf97af99d79e210f6fe294
- TLSH T1E45153E377B013AA4B8502DDB5C0773DE8AE2DCF5CC8CA287101B51A08C0C6CD6B3848
- MD5 SHA1 SHA512 TLSH