Overview

overview

7

Static

static

Notificati...22.msg

windows7-x64

6

Notificati...22.msg

windows10-2004-x64

ACH_Direct...(3).js

windows7-x64

1

ACH_Direct...(3).js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Notification of Direct Deposit submitted on 29112022.msg

  • Size

    143KB

  • Sample

    221129-thy36agd71

  • MD5

    1aa49de08795af5393aaaf23ace9cb0a

  • SHA1

    da2b6297f7c3c090856d6f1d4c87259fa29fecc6

  • SHA256

    864643b31ef29368b0d619890c16f723beb61496cc13d872915ee2b19cf0a3c0

  • SHA512

    174a8314c004ec3baab0e1a928502792142a6c27fe806ddeb2c0b156d8f6ea1177004fb7e5d914427857106ec3e97a12a3c6b3a75af3a14510ac08934b106736

  • SSDEEP

    1536:KzPJ8roWNWAE2qsVT4wiAQ394LJFCAJQAela/XWNWjTCJd:2BojE25VUwiAQObec/lTCD

Score
7/10
collection

Malware Config

Targets

    • Target

      Notification of Direct Deposit submitted on 29112022.msg

    • Size

      143KB

    • MD5

      1aa49de08795af5393aaaf23ace9cb0a

    • SHA1

      da2b6297f7c3c090856d6f1d4c87259fa29fecc6

    • SHA256

      864643b31ef29368b0d619890c16f723beb61496cc13d872915ee2b19cf0a3c0

    • SHA512

      174a8314c004ec3baab0e1a928502792142a6c27fe806ddeb2c0b156d8f6ea1177004fb7e5d914427857106ec3e97a12a3c6b3a75af3a14510ac08934b106736

    • SSDEEP

      1536:KzPJ8roWNWAE2qsVT4wiAQ394LJFCAJQAela/XWNWjTCJd:2BojE25VUwiAQObec/lTCD

    Score
    7/10
    collection

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Accesses Microsoft Outlook profiles

      collection

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      ACH_Direct.Deposit_Notificiations-2(3).hTm

    • Size

      274B

    • MD5

      c872468789486075c85012f9fdeaf0e8

    • SHA1

      e55635a6fa7229177384fc1abb138c4a0a2df664

    • SHA256

      fa1a82ecd5567e0168cdddedcfb9492fd2abf0f1f1e84d7f84c7055b9a9bf5bc

    • SHA512

      81b7f9c3361323a526ebdfb762bc0fb0dbdf9e66eaebdcea899982186679e177f0fafdc3afaff321a609e0b23860e69301608139e09f65e74d2ee31aa61e81b7

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks