Overview

overview

5

Static

static

1

ACCOUNT PE...BP.eml

windows7-x64

5

ACCOUNT PE...BP.eml

windows10-2004-x64

1

email-html-2.txt

windows7-x64

1

email-html-2.txt

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ACCOUNT PENDING DUE TO BUSINESS LIMIT £30.00 Elizabeth.Kelly440@ntlworld.com GBP.eml

  • Size

    90KB

  • Sample

    230526-m93gbsfb59

  • MD5

    6e3d09d33d989f874f02f391dc20ef9c

  • SHA1

    d3cced2fc02dd67afbc09777f2ce3676203b4be8

  • SHA256

    2fe9279529ce707c7bddca0a77ddcd51cebc8a23d8342c5b13c12df55476f5f7

  • SHA512

    4e238387565f9d6d5f14f3bb2b691bee327946e5fa5b1dba84a45dc92dd22f1decb40467026fbce90224cb7d75af0b2cf198ecf63f85a2b85d90de8b62819824

  • SSDEEP

    192:rLS/92rZ/gZrasGJILKbXKQI4g+KfjA2ORuEOydOOTO9AbhhdqsoO1dFJOnOOI4t:rLtjBRP3WFAhjnK

Score
5/10

Malware Config

Targets

    • Target

      ACCOUNT PENDING DUE TO BUSINESS LIMIT £30.00 Elizabeth.Kelly440@ntlworld.com GBP.eml

    • Size

      90KB

    • MD5

      6e3d09d33d989f874f02f391dc20ef9c

    • SHA1

      d3cced2fc02dd67afbc09777f2ce3676203b4be8

    • SHA256

      2fe9279529ce707c7bddca0a77ddcd51cebc8a23d8342c5b13c12df55476f5f7

    • SHA512

      4e238387565f9d6d5f14f3bb2b691bee327946e5fa5b1dba84a45dc92dd22f1decb40467026fbce90224cb7d75af0b2cf198ecf63f85a2b85d90de8b62819824

    • SSDEEP

      192:rLS/92rZ/gZrasGJILKbXKQI4g+KfjA2ORuEOydOOTO9AbhhdqsoO1dFJOnOOI4t:rLtjBRP3WFAhjnK

    Score
    5/10

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      email-html-2.txt

    • Size

      78KB

    • MD5

      cde76a9fc88f3d981c82fbb139883d0c

    • SHA1

      7183475bdd0c3086e8a58cef4fd65e865a56ed3b

    • SHA256

      25e3cf77722c1d6005f7a85705c6a13b498296d36e716b67876564f8bf8969d2

    • SHA512

      3758b2bb0372f5b2d7b1e1958249880fbb24663c334bf7f0419e36cc77ade8f631bf8dc18886592bbaba0abaf39f30314ed6e4bda8ce2ef8a9535cdd7579ed86

    • SSDEEP

      96:ajLEMfxxasasasasaxxasasasasasasasasasasasassssssssasasasasasasa3:aE6vUgA

    Score
    1/10
    behavioral3behavioral4

    • Target

      email-plain-1.txt

    • Size

      892B

    • MD5

      5254433ec8fbc2309c8b564ba741c1be

    • SHA1

      8f231b76918d8c81fb1d7fcf77e245866a6dd9f5

    • SHA256

      98ff0d1a77eed4d9986f2b75c7a411f699e83792b4671939be220a5a327c8b12

    • SHA512

      0655182e7864232a4a6afbee0633365236fb91ad2884e31956ad73057954c2b1dd39c0c5f51a0b95b4797eee7cf7ed3b8b5cae46685369a9b79fb1c7a7aa8322

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks