General

  • Target

    Quarantined Messages (2).zip

  • Size

    655KB

  • Sample

    231010-jdvvtsdh94

  • MD5

    a7fbcb3ece37d92e10976e71cbaa833e

  • SHA1

    dfced9865d38f3150b320d70a9c954dcbdf6437d

  • SHA256

    16ac3a482344c61d1fed027db6a7b1265914084073dd32833596d514092c95d3

  • SHA512

    01672518574e2760104bdf153b85ccac23e8c74b1c82f55cb1204d1b2cb34718c915bf3a56855fbaae7170c5223b62806432fd974402c7dbe7e6d3a09434a2c1

  • SSDEEP

    12288:+5EbXt9ChznncNMz4jnG5zsHyDqQEzU7V4s5fsKYrgXMkG5I6oBG4G/aVzEVqZ4t:cEJQhznz4jnrHoqQE4V48Crg8c6oYd/F

Score
7/10

Malware Config

Targets

    • Target

      b542a76b-6268-4a42-4a31-08dbc9572082/5b1840db-7af9-d471-85e0-b44f6bac8668.eml

    • Size

      870KB

    • MD5

      55206913a8e517ea98eea0723a9af9d2

    • SHA1

      f00560631ae009835ebc71a0e6183f61b18cb0cb

    • SHA256

      bde691f02080f6933efaaa680b81e4317a8d46658791c8caa80441470fbf8315

    • SHA512

      bbe00a026c14d819e537b4ca9b4abfba59106d096d9065d8ea18bea7bccda584376888a661cae750b140c60484fd7a4608988b816b7f2ea723714694124ba1d7

    • SSDEEP

      24576:a1qj78QAz7eGVg1zpShvvr2y23/JmUbmQISro:rlAmGge2y23vmn

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Target

      Pensionisternes NA GOD.exe

    • Size

      766KB

    • MD5

      e5386ec1666afd49b7a21d15b32c923e

    • SHA1

      b85b5e0c8a98d205cea61e7690fe6f8bcdf0d138

    • SHA256

      00ca7e72a993d0d28c9e4fe737562bcddeff8717945f1636e60a229616b60897

    • SHA512

      5953fd7b9d1392beafa3c177e2a8d5c84bad39aa200713191254b47c970afda152db24d1187839c27cae07a86dcae574f80426a327be5b8c8ad00804ec1278b6

    • SSDEEP

      12288:M0f2JEhxz/aAjCy8S4JzZ2q0c0i/bW5/ojweXtTYVNPvwfj9HBrRYzzpT2:M0foEhxFjr4FZ2tVi/bWo9T2PoftxGV6

    Score
    7/10
    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks