(1)
Sender ip | 185.222.58.152 |
From | "Account" <[email protected]>" |
Subject | "Statement of account -invoices No. 10132870" |
Attachment | "DUE INVOICES.zip" |
MD5 | 3402fa1649793be014907c9e7538cb90 |
SHA256 | 7fa3827e99f28c847cee92b9753e5978069868f9d7fc447c846bfbeafae43666 |
Family | AgentTesla |
(2)
Sender ip | 199.10.31.237 |
From | |
Subject | "PRODUCT CONFIRMATION REQUEST" |
Attachment | "Sales order 191923.gz" |
MD5 | a1c19acee1b59ff6530dc5caadbcf356 |
SHA256 | 304b4c9957a518e5b1b765f84557372160266bf55a65963a1b7336ccdf34a084 |
Family | AgentTesla |
(3)
Sender ip | 103.133.105.111 |
From | "Jiangchuan Junguan <[email protected]>" |
Subject | "NEW ORDER INQUIRY_B1020289" |
Attachment | "NEW ORDER INQUIRY_B1020289.pdf.gz" |
MD5 | a24201e99541561a5ef93b54dfa8badd |
SHA256 | f94e98462af69853708dcc3e752dafeb42995ddb322741f3f958460a210c164c |
Family | Formbook |
(4)
Sender ip | 203.159.80.162 |
From | "Mohammed Hanif <[email protected]>" |
Subject | "(NGCP) Pipeline PROJECT - TA-725638 - DK-RH-HRDH - HEADER PLATFORM TYPE 1-16-47M_MARKING & FABRICATION DRAWINGS WITH FULL PACKAGE FOR CONSTRUCTION" |
Attachment | "NGCP Pipeline PROJECT TA 725638 DK RH HRDH HEADER PLATFORM TYPE 1 16 47M MARKING & FABRICATION DRAWINGS WITH FULL PACKAGE FOR CONSTRUCTION (2).zip" |
MD5 | 3cc25b5305da49f00e7bfb3ba19caa1c |
SHA256 | 32f8065d637ce4e96a8c56dd0a5a9f41fb8c443ffe913c69d2e422e304908c2c |
Family | Unknown |
(5)
Sender ip | 185.222.58.152 |
From | "Account" <[email protected]>" |
Subject | "Statement of account" |
Attachment | "SOA.zip" |
MD5 | b5155ad7c3debabeece655d1852095c4 |
SHA256 | 90c1d680a867af042eaf60ba32ab1a651ee270a3fbad7cf806681d6b74138d33 |
Family | AgentTesla |
(6)
Sender ip | 199.10.31.238 |
From | |
Subject | "Re: RE: Request For PI" |
Attachment | "Order Items.gz" |
MD5 | efd35f97c09fdcc7cc4114fab49a87b9 |
SHA256 | 40cec6cc82800698e57005753fa5bc7a379a64b3a3ed15efc6ad357604edd7ea |
Family | AgentTesla |
If you wanna learn malware analysis you can check my YouTube channel I'm trying publish analysis of malware and some methods to analysis malwares.
Please don't forgot subscribe my channel Than you ♥
YouTube channel
https://www.youtube.com/channel/UCParXHaBXBmqRdHuVUg21pA
Article Link: Phishing Attacks 29_4_2021