Phishing Attacks 29_4_2021

 



(1)

Sender ip

185.222.58.152

From

"Account" <[email protected]>"

Subject

"Statement of account -invoices No. 10132870"

Attachment

"DUE INVOICES.zip"

MD5

3402fa1649793be014907c9e7538cb90

SHA256

7fa3827e99f28c847cee92b9753e5978069868f9d7fc447c846bfbeafae43666

Family

AgentTesla

 


(2)

Sender ip

199.10.31.237

From

"[email protected]"

Subject

"PRODUCT CONFIRMATION REQUEST"

Attachment

"Sales order 191923.gz"

MD5

a1c19acee1b59ff6530dc5caadbcf356

SHA256

304b4c9957a518e5b1b765f84557372160266bf55a65963a1b7336ccdf34a084

Family

AgentTesla

 

(3)

 

Sender ip

103.133.105.111

From

"Jiangchuan Junguan <[email protected]>"

Subject

"NEW ORDER INQUIRY_B1020289"

Attachment

"NEW ORDER INQUIRY_B1020289.pdf.gz"

MD5

a24201e99541561a5ef93b54dfa8badd

SHA256

f94e98462af69853708dcc3e752dafeb42995ddb322741f3f958460a210c164c

Family

Formbook

 


(4)

 

Sender ip

203.159.80.162

From

"Mohammed Hanif <[email protected]>"

Subject

"(NGCP) Pipeline PROJECT - TA-725638 - DK-RH-HRDH - HEADER PLATFORM TYPE 1-16-47M_MARKING & FABRICATION DRAWINGS WITH FULL PACKAGE FOR CONSTRUCTION"

Attachment

"NGCP Pipeline PROJECT TA 725638 DK RH HRDH HEADER PLATFORM TYPE 1 16 47M MARKING & FABRICATION DRAWINGS WITH FULL PACKAGE FOR CONSTRUCTION (2).zip"

MD5

3cc25b5305da49f00e7bfb3ba19caa1c

SHA256

32f8065d637ce4e96a8c56dd0a5a9f41fb8c443ffe913c69d2e422e304908c2c

Family

Unknown

 


(5)

Sender ip

185.222.58.152

From

"Account" <[email protected]>"

Subject

"Statement of account"

Attachment

"SOA.zip"

MD5

b5155ad7c3debabeece655d1852095c4

SHA256

90c1d680a867af042eaf60ba32ab1a651ee270a3fbad7cf806681d6b74138d33

Family

AgentTesla

 

(6)

Sender ip

199.10.31.238

From

"[email protected]"

Subject

"Re: RE: Request For PI"

Attachment

"Order Items.gz"

MD5

efd35f97c09fdcc7cc4114fab49a87b9

SHA256

40cec6cc82800698e57005753fa5bc7a379a64b3a3ed15efc6ad357604edd7ea

Family

AgentTesla



If you wanna learn malware analysis you can check my YouTube channel I'm trying publish analysis of malware and some methods to analysis malwares.
Please don't forgot subscribe my channel Than you ♥  
YouTube channel 
https://www.youtube.com/channel/UCParXHaBXBmqRdHuVUg21pA

Article Link: Phishing Attacks 29_4_2021