2e214679ce6481cd421641a04747f52e453ae9aedcef9613f4cca02a66eb5498 | Triage

Submit
Reports

Overview

overview

Static

static

8

2d0d46d5-2...f6.eml

windows7-x64

5

2d0d46d5-2...f6.eml

windows10-2004-x64

3

Mail Attachment.eml

windows7-x64

5

Mail Attachment.eml

windows10-2004-x64

3

2022-06-29...on.pdf

windows7-x64

1

2022-06-29...on.pdf

windows10-2004-x64

1

2022-06-29...TR.pdf

windows7-x64

1

2022-06-29...TR.pdf

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

RE_ [SC27W...on.eml

windows7-x64

5

RE_ [SC27W...on.eml

windows10-2004-x64

3

Dlist.serv...rt.zip

windows7-x64

1

Dlist.serv...rt.zip

windows10-2004-x64

1

2665187713...om.doc

windows7-x64

2665187713...om.doc

windows10-2004-x64

email-html-1.html

windows7-x64

1

email-html-1.html

windows10-2004-x64

1

email-html-2.html

windows7-x64

1

email-html-2.html

windows10-2004-x64

1

email-html-3.html

windows7-x64

1

email-html-3.html

windows10-2004-x64

1

email-html-4.html

windows7-x64

1

email-html-4.html

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

Analysis

max time kernel
144s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
13-03-2023 07:30

Sharing

Static task

static1

pdf link macro macro_on_action

3 signatures

Behavioral task

behavioral1

Sample

2d0d46d5-2f07-4223-612d-e119141337f6.eml

Resource

win7-20230220-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

2d0d46d5-2f07-4223-612d-e119141337f6.eml

Resource

win10v2004-20230220-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

Mail Attachment.eml

Resource

win7-20230220-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

Mail Attachment.eml

Resource

win10v2004-20230220-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

2022-06-29_Circular_letter_CD_Consultation.pdf

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

2022-06-29_Circular_letter_CD_Consultation.pdf

Resource

win10v2004-20230221-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

2022-06-29_Circular_letter_DTS_DPAS_DTR.pdf

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

2022-06-29_Circular_letter_DTS_DPAS_DTR.pdf

Resource

win10v2004-20230220-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral9

Sample

email-plain-1.txt

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

email-plain-1.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

RE_ [SC27WG5] ZKP PWI and call for contribution.eml

Resource

win7-20230220-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

RE_ [SC27WG5] ZKP PWI and call for contribution.eml

Resource

win10v2004-20230220-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

Dlist.server.uni-frankfurt.zip

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Dlist.server.uni-frankfurt.zip

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

26651877134168, United Kingdom.doc

Resource

win7-20230220-en

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral16

Sample

26651877134168, United Kingdom.doc

Resource

win10v2004-20230220-en

emotet epoch4 banker trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

email-html-1.html

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

email-html-1.html

Resource

win10v2004-20230221-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

email-html-2.html

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

email-html-2.html

Resource

win10v2004-20230220-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

email-html-3.html

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

email-html-3.html

Resource

win10v2004-20230220-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral23

Sample

email-html-4.html

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

email-html-4.html

Resource

win10v2004-20230221-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

email-plain-1.txt

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

email-plain-1.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Dlist.server.uni-frankfurt.zip
Size

673KB
MD5

6b881f081cb6b56faa2c4f8c2e3a68af
SHA1

42c3a8fe26dec788f9deeb757c674c429d357295
SHA256

018a73b48bd511365c761558d41517cc89a613ffb9a8a6f6872a5dc34eddb6d6
SHA512

b029dc172c595bda668872e5f3a162c9b5ccd628671d03917bcd9cb92f7a041c9d0f589cb56d15160843f40e1b0112b7eae6b053d9040d98b17ba994af665205
SSDEEP

3072:TJPwOBqguhRok0EOsHYQLMTwyOy2w4OLWxKJ5SuNVWla3P:djTuh1OVQTy/LWq7Wlaf

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Dlist.server.uni-frankfurt.zip
1⤵
PID:5080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy