General

  • Target

    Re Expiration Date for the training session LGP101_VIR_91735.msg

  • Size

    464KB

  • Sample

    221025-sc1jcsdac5

  • MD5

    8ff1520a663f6fe9978ef037d5cca191

  • SHA1

    a5b4811bf11513a8074e022783d4e149fafb2f94

  • SHA256

    19a07121c070173682158694dd0ccde4a79df3eb32b326d34fffd8d0c62254a3

  • SHA512

    c7f20aa3d6632b8a380235dd5185542650788457776c56d09396d1afbb19a51c2d0c8a94c1b0a73cd61b3d94606d1efcbb8401b793aca0c462b7f9874a62bb13

  • SSDEEP

    6144:kbh81Nq89q8u6h9Fh5Bw1U/y3NysOXky/9JkS5EFz135KI4RG7HUaxUDUs:QIfw1FMVJkSCzR34RGTQws

Score
6/10

Malware Config

Targets

    • Target

      Re Expiration Date for the training session LGP101_VIR_91735.msg

    • Size

      464KB

    • MD5

      8ff1520a663f6fe9978ef037d5cca191

    • SHA1

      a5b4811bf11513a8074e022783d4e149fafb2f94

    • SHA256

      19a07121c070173682158694dd0ccde4a79df3eb32b326d34fffd8d0c62254a3

    • SHA512

      c7f20aa3d6632b8a380235dd5185542650788457776c56d09396d1afbb19a51c2d0c8a94c1b0a73cd61b3d94606d1efcbb8401b793aca0c462b7f9874a62bb13

    • SSDEEP

      6144:kbh81Nq89q8u6h9Fh5Bw1U/y3NysOXky/9JkS5EFz135KI4RG7HUaxUDUs:QIfw1FMVJkSCzR34RGTQws

    Score
    6/10
    • Accesses Microsoft Outlook profiles

    • Drops file in System32 directory

    • Target

      0.LGP101_VIR_SPG_2021-06.pdf

    • Size

      235KB

    • MD5

      354c46db88df4a76b1c21317f488e241

    • SHA1

      e03d5b5980696ead59e59fc3e7e56a4c2f9b3464

    • SHA256

      6f92c9ce388c2f2ed3b2d91011e14666703e2c04d8fb6a40ece360d91a31077d

    • SHA512

      01839b2d785ed8b54c0531e6e574f6d9877ff426b600839c0cf128129d5583fc7745398e2cd75cee895061df6c945dfd8539175b1bde99faaa4f2466ba046c22

    • SSDEEP

      6144:Hw1U/y3NysOXky/9JkS5EFz135KI4RG7HUaxUDUs1:Q1FMVJkSCzR34RGTQws1

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

2
T1112

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Collection

Email Collection

1
T1114

Tasks