Overview

overview

6

Static

static

phish_aler....0.eml

windows7-x64

6

phish_aler....0.eml

windows10-2004-x64

3

email-html-1.html

windows7-x64

1

email-html-1.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    phish_alert_sp2_2.0.0.0.eml

  • Size

    11KB

  • Sample

    221129-rwbhxaha27

  • MD5

    328049386c516be96414080cc11d1b1f

  • SHA1

    f691501c2b1ac94fa965ae77b4547c882ad7d858

  • SHA256

    9a67628fa8d0a91e125868c847e9cc5c1ecea9d3fbc39ffa132948b43b1bc69e

  • SHA512

    963f1929e6bbd4bdd29d552d1268dcda1f554c0c17e6d8c34a184385a7c9f7529d4c6d13ab8d8e4207ee17b679fb7f3df69dd381ec84bc6106a019e443c1bbe2

  • SSDEEP

    192:jGdCrYtoLbhB9yV6ZOIXmE+6tpe0mLpXIiUhowcV:H1b5XZXNfenLVtzV

Score
6/10
collection

Malware Config

Targets

    • Target

      phish_alert_sp2_2.0.0.0.eml

    • Size

      11KB

    • MD5

      328049386c516be96414080cc11d1b1f

    • SHA1

      f691501c2b1ac94fa965ae77b4547c882ad7d858

    • SHA256

      9a67628fa8d0a91e125868c847e9cc5c1ecea9d3fbc39ffa132948b43b1bc69e

    • SHA512

      963f1929e6bbd4bdd29d552d1268dcda1f554c0c17e6d8c34a184385a7c9f7529d4c6d13ab8d8e4207ee17b679fb7f3df69dd381ec84bc6106a019e443c1bbe2

    • SSDEEP

      192:jGdCrYtoLbhB9yV6ZOIXmE+6tpe0mLpXIiUhowcV:H1b5XZXNfenLVtzV

    Score
    6/10
    collection

    • Accesses Microsoft Outlook profiles

      collection

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      email-html-1.txt

    • Size

      806B

    • MD5

      12f3e0f956b0b5bfd88bea878312a60b

    • SHA1

      5e43413474a6f303f039c4ed5855efd9d384d502

    • SHA256

      d03998781a0f57f946b9ff29159f2d557e18c52688c51c34f8528c74e85fb92f

    • SHA512

      98e9005eade7b3e016d62e118b653613481fae621106b9ae2b4a460fcde363eedc5a9aa79e1fec70c337f6460f3bf48616d68e20ef7129bab6978f21945b9537

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks