Phishing Attacks 8_5_2021

 




(1)

Sender ip

45.137.22.41

From

"JENNIFER <Sales@agsflow.com.sg>"

Subject

"RE : RFQ-AGS21277"

Attachment

"RFQ-AGS21277_pdf.lzh"

MD5

ca0d509b6ed3098e589ef16fc8e900b1

SHA256

e47e486c7a41e027316eb01cf4b9a93f847933566e84ae178eaa99d5accc4d7e

Family

Loki

 


(2)

Sender ip

103.139.44.91

From

"Hong Lam <boris.zhang@sailuntire.com>"

Subject

"SWIFT COPY FOR ADVANCE PAYMENT"

Attachment

"SWIFT COPY FOR ADVANCE PAYMENT.rar"

MD5

16a2e60be265343b6b55e16110d5633f

SHA256

3f9eb1d67f5f85ad76dc28a3fa3112459d7bb614ff177cbd178ee1035649da15

Family

AgentTesla

 If you wanna know how to analysis AgentTesla Malware you can check my analysis in YouTube  AgentTesla

(3)

 

Sender ip

103.133.106.100

From

"Sofien Ben Jemaa<info@probona.com.tr>"

Subject

"Original Documents"

Attachment

"Invoice_20210204.zip"

MD5

a3aadc97039f85f40f8fef2522d23116

SHA256

60c51de032d9f139ccd9f4dcbbd88f4e3911ac496042fad636c1361daaf71a48

Family

SnakeKeylogger

 


(4)

 

Sender ip

103.133.106.100

From

"Sofien Ben Jemaa<info@probona.com.tr>"

Subject

"Original Documents"

Attachment

"BL.zip"

MD5

6487f113dda7b69b9404d218d525fbf2

SHA256

73f765a9c4713b8047fe5f71e0bd38426f230df062b6e291990dffe6e0836ba8

Family

AgentTesla

 

If you wanna know how to analysis AgentTesla Malware you can check my analysis in YouTube  AgentTesla

(5)

Sender ip

103.139.44.91

From

"Wang Fang <boris.zhang@sailuntire.com>"

Subject

"NEW ORDER #745332"

Attachment

"NEW ORDER #745332.rar"

MD5

b1b481f73161a2306815df887dc32f03

SHA256

8bf61f9efba8f27282e3bb4d0e3661260ce5c265c27630878b64aa138a1adc68

Family

AgentTesla

 If you wanna know how to analysis AgentTesla Malware you can check my analysis in YouTube  AgentTesla

(6)

Sender ip

103.139.44.91

From

"Suzy (Borgers-Tuopu)"<suzy@borgers-tuopu.com>"

Subject

"RE: AW: Ningbo New Order TP-20210345002"

Attachment

"NINGBO-ORDER TP-20210345002.wim.001"

MD5

131639bf3ca42f4fdd8d9a97cfde11e0

SHA256

97e2aef18478986c555089e29a6ef38ac5dfe4109d996e7ca0abaa231535a8a7

Family

Unknown


(7)

Sender ip

45.137.22.149

From

"info@dijlashipping.com"

Subject

"RE: SHIPPING DOCUMENT & PACKING LIST"

Attachment

"PMSHIPPING DOCUMENT & PL.r00"

MD5

8f1d3b0ef919775f563e4c6fe4cc2f91

SHA256

3f21c1dadbb99df098bc46b886abcd6d8e9d4093e9283f6bf9de185a2446dddf

Family

AgentTesla


If you wanna know how to analysis AgentTesla Malware you can check my analysis in YouTube  AgentTesla..


If you wanna learn malware analysis you can check my YouTube channel I'm trying publish analysis of malware and some methods to analysis malwares.
Please don't forgot subscribe my channel Than you ♥  
YouTube channel 
https://www.youtube.com/channel/UCParXHaBXBmqRdHuVUg21pA

Comments

Popular posts from this blog

Sunburst Solarwinds Backdoor

Ragnarok Ransomware

Phishing Attacks 9_4_2021