General

  • Target

    PTL Capital Lnc.msg

  • Size

    308KB

  • Sample

    230102-xnes9afd95

  • MD5

    4c9b0e82fb4ec788346215bf878e4869

  • SHA1

    62c064db4cd8d212c7c67bef35f227a4d2037833

  • SHA256

    1a7f056ce9300cab56867c738f70095239b9d4d29daa1b392617b803a47176c6

  • SHA512

    6df878f974acc522e69dab520fdca76dd635dffa98ca7b43ef9b80850be4acfdd593a4e52175605d068fabbd5499a8d416ef3984bdbb74bdb8a7c3c29e65ddc2

  • SSDEEP

    6144:YBFbfTLmFdnKSCF1Kz3ykgYxCxNrJxnA4GnGS0FhekB/QbrlCQxcyH:U7XGQ1Kz3yk9xCxdJh1Gnx0FheIArlCK

Score
6/10

Malware Config

Targets

    • Target

      PTL Capital Lnc.msg

    • Size

      308KB

    • MD5

      4c9b0e82fb4ec788346215bf878e4869

    • SHA1

      62c064db4cd8d212c7c67bef35f227a4d2037833

    • SHA256

      1a7f056ce9300cab56867c738f70095239b9d4d29daa1b392617b803a47176c6

    • SHA512

      6df878f974acc522e69dab520fdca76dd635dffa98ca7b43ef9b80850be4acfdd593a4e52175605d068fabbd5499a8d416ef3984bdbb74bdb8a7c3c29e65ddc2

    • SSDEEP

      6144:YBFbfTLmFdnKSCF1Kz3ykgYxCxNrJxnA4GnGS0FhekB/QbrlCQxcyH:U7XGQ1Kz3yk9xCxdJh1Gnx0FheIArlCK

    Score
    6/10
    • Accesses Microsoft Outlook profiles

    • Drops file in System32 directory

    • Target

      PTL Capital Inc. Tax Clearance Letter for Reinstatement Letter Comptroller TX.pdf

    • Size

      207KB

    • MD5

      2d5759be563a786b821a33da0ffa4064

    • SHA1

      101ef7badeb56ae28d88499215ce9ec067ce0139

    • SHA256

      ca725d6ad7d142f1d384cd9c6c4732730fcd4feb2fcb7d24217f7f91a2098d4e

    • SHA512

      27fd65a431e78a8f5083127bc193620c121df6954a13dcf11b5944bf9f974f58595073003c243e3bde4901640d617419356a157528077c201f85bebdcd09f785

    • SSDEEP

      6144:fKz3ykgYxCxNrJxnA4GnGS0FhekB/QbrlCQxcyHv:fKz3yk9xCxdJh1Gnx0FheIArlCQ6yP

    Score
    1/10

MITRE ATT&CK Enterprise v6

Tasks