Overview

overview

6

Static

static

phish_aler....0.eml

windows7-x64

6

phish_aler....0.eml

windows10-2004-x64

3

email-html-1.html

windows7-x64

1

email-html-1.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    phish_alert_sp2_2.0.0.0.eml

  • Size

    10KB

  • Sample

    221129-tcdj9sdb34

  • MD5

    d1365256f489fdf28c337d219f416bd7

  • SHA1

    054bb43fe1c625aa15340af6eb766ce72581185b

  • SHA256

    c62dd8422d3fefc0c23a05516f1caf3ac39e7f721648cdf92b40ae8c588a6193

  • SHA512

    b40a7ef0576aebe1efc691dfc166b9755e6b4ea933c317c8491a1a9e4d403d100bc3dedf96cd55d80debd0961c8bfd81cc589b7ff768b6111f695912410f20fe

  • SSDEEP

    96:1RG+4RHqUI4ctiYhWyW9pdBFQYKr7gLRcJ9qKSk93AmX9NT1tlMJTog3YPmz9RwB:cY7gLujT1tlkr962fbToqmv9P3FJ

Score
6/10
collection

Malware Config

Targets

    • Target

      phish_alert_sp2_2.0.0.0.eml

    • Size

      10KB

    • MD5

      d1365256f489fdf28c337d219f416bd7

    • SHA1

      054bb43fe1c625aa15340af6eb766ce72581185b

    • SHA256

      c62dd8422d3fefc0c23a05516f1caf3ac39e7f721648cdf92b40ae8c588a6193

    • SHA512

      b40a7ef0576aebe1efc691dfc166b9755e6b4ea933c317c8491a1a9e4d403d100bc3dedf96cd55d80debd0961c8bfd81cc589b7ff768b6111f695912410f20fe

    • SSDEEP

      96:1RG+4RHqUI4ctiYhWyW9pdBFQYKr7gLRcJ9qKSk93AmX9NT1tlMJTog3YPmz9RwB:cY7gLujT1tlkr962fbToqmv9P3FJ

    Score
    6/10
    collection

    • Accesses Microsoft Outlook profiles

      collection

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      email-html-1.txt

    • Size

      806B

    • MD5

      6e199f3f36a169836fb432d3cf9204ba

    • SHA1

      0656ffb4fed71f4443cb4f9c03d345d149e30c09

    • SHA256

      75cb9e9220bc0f2d14c767403502aea6b3c1f82bc696a07e16731ee08269b182

    • SHA512

      52e5b467269a214a29b4d0bf29735b567b534fbfe277dafd3aefa4ff4116fdfda701fbf45d4c44654996081b964ff9f918dadf93101eba64ae8b6a045ca2351e

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks