General
- Target FW Hello STATE OF TEXAS.msg
- Size 3.1MB
- Sample221004-scnvkabfbm
- SHA256 c6a55ba02d3915a63cd351c5fc253f9b323bf639ff90e4716d68b53e8654f64e
- MD5 25702ca8ef534b0dcb05e41184f974ba
- SHA1 dbcf42c9c8858aeaa77f047f6a07057530f14dcf
- SHA512 c61594fe8ecce72d1789cf14f58ffe8d9c7f4db343223487447be1193766e5952b84b8b7b6ea885a05e786eea3a8876d0226061db0b9d3a4d8d4000666e9ae04
- SSDEEP 49152:uh8fp5ytAyoeoM7BPzE36MwoYkzkbcYSD6Q0H4oiwpGNNyybcuZ6BiLXOop4jQ5:nfp5ZbMdLmwoYRcY46AApGXvYbG4k
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
FW Hello STATE OF TEXAS.msg
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
FW Hello STATE OF TEXAS.msg
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
Hello, STATE OF TEXAS.pdf
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Hello, STATE OF TEXAS.pdf
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
bry l el_bryshawn whigham_identification_8.5x14_trust corpus_national identification card_DOJ - NOT.pdf
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
bry l el_bryshawn whigham_identification_8.5x14_trust corpus_national identification card_DOJ - NOT.pdf
Resource
win10v2004-20220901-en
Malware Config
Targets
-
- Target FW Hello STATE OF TEXAS.msg
- Size 3.1MB
- SHA256 c6a55ba02d3915a63cd351c5fc253f9b323bf639ff90e4716d68b53e8654f64e
- MD5 25702ca8ef534b0dcb05e41184f974ba
- SHA1 dbcf42c9c8858aeaa77f047f6a07057530f14dcf
- SHA512 c61594fe8ecce72d1789cf14f58ffe8d9c7f4db343223487447be1193766e5952b84b8b7b6ea885a05e786eea3a8876d0226061db0b9d3a4d8d4000666e9ae04
- SSDEEP 49152:uh8fp5ytAyoeoM7BPzE36MwoYkzkbcYSD6Q0H4oiwpGNNyybcuZ6BiLXOop4jQ5:nfp5ZbMdLmwoYRcY46AApGXvYbG4k
- MD5 SHA1 SHA512 SSDEEP
Score6/10Accesses Microsoft Outlook profiles
Drops file in System32 directory
-
- Target Hello, STATE OF TEXAS.pdf
- Size 225KB
- SHA256 525b2f6063d264d8758323d584436827b72344275a28438db2f2b2632c70b88c
- MD5 52cd8f0375afa338c782c7099d1c595a
- SHA1 460c9cb93fd79cf53a33bad2017664081ecf2784
- SHA512 18d731eeed83e10a9eb847404fe5db511fa357756b1d26a220fe27693fbc767febf13cb022558fd1c23dadcd0e0e6ec356a56006e983d9e7915e05170785f54f
- SSDEEP 3072:Nl3WoMuPCgiuwK+0de4MgGFMLwxwpcSV9fGcLuHHO2h5nPPxhh2KnPPxHh22:iKi50/MgFLwxwH9fGOuOS5XxhhnXxHhL
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target bry l el_bryshawn whigham_identification_8.5x14_trust corpus_national identification card_DOJ - NOT IDENTIFICATION DOCUMENTS (1).pdf
- Size 2.7MB
- SHA256 0a4a424a33f48244083d38948eb3ab0b68534182a9b16679009eaee821f2fba0
- MD5 fbdfac526197fbc1e668b5ecbd017b4e
- SHA1 9d3a03c5d990a3d4511a4ec6a15526c285cc603b
- SHA512 912d6aea01f659ee8779b6854cbef9803bb44147001d2518d7dca635f010d23efd38d84046c2568ce70be0089013d9097b0f1da21da27d6ea67e0156d302306e
- SSDEEP 49152:PtAyoeoM7BPzE36MwoYkzkbcYSD6Q0H4oiwpGNNyybcuZ6BiLXOop4jQ5A:qbMdLmwoYRcY46AApGXvYbG4ku
- MD5 SHA1 SHA512 SSDEEP
Score1/10