Overview

overview

6

Static

static

phish_aler....0.eml

windows7-x64

6

phish_aler....0.eml

windows10-2004-x64

3

email-html-1.html

windows7-x64

1

email-html-1.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    phish_alert_sp2_2.0.0.0.eml

  • Size

    10KB

  • Sample

    221129-q4ygzaed39

  • MD5

    6fb204efc6995dab3db0abe7bbbaaa78

  • SHA1

    d4b65c129e0aabe840581b317aa5fb2b2077db27

  • SHA256

    f88fbd39db3be212047e454824898a484837e8f046358976c10a14c3dc99be93

  • SHA512

    a5b3a3b2a659f99b8dbec121e08a02cb45993437e2117c8f522c7ead660bcfff100f0f91a5b4243d4889fd8cd03d344344ef3829360c7aaf0ed8660b40debfa8

  • SSDEEP

    192:HDET6/QgigmGLbHxDDYaGwuxsT5KYzKo2NpmXPNILIn:Hk6/QEDDYaJuQd2Ojn

Score
6/10
collection

Malware Config

Targets

    • Target

      phish_alert_sp2_2.0.0.0.eml

    • Size

      10KB

    • MD5

      6fb204efc6995dab3db0abe7bbbaaa78

    • SHA1

      d4b65c129e0aabe840581b317aa5fb2b2077db27

    • SHA256

      f88fbd39db3be212047e454824898a484837e8f046358976c10a14c3dc99be93

    • SHA512

      a5b3a3b2a659f99b8dbec121e08a02cb45993437e2117c8f522c7ead660bcfff100f0f91a5b4243d4889fd8cd03d344344ef3829360c7aaf0ed8660b40debfa8

    • SSDEEP

      192:HDET6/QgigmGLbHxDDYaGwuxsT5KYzKo2NpmXPNILIn:Hk6/QEDDYaJuQd2Ojn

    Score
    6/10
    collection

    • Accesses Microsoft Outlook profiles

      collection

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      email-html-1.txt

    • Size

      806B

    • MD5

      48218676a64a025a810976561915edb3

    • SHA1

      08ae63a9b48ee7df19572247fd5e5729bfb622af

    • SHA256

      49df2e11a91ae6ab81fe25ff9d8ea04145225cf19c4f6a7e563084e86a826b87

    • SHA512

      16239c41b8369c8aeea410f2f8d43dbfa7173ba86cea897ef65b203a738f9b1bdef8b842f36e97d1e5dae875b2aa32934fbfd5c159e94fee79395d242dac8988

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks