Overview

overview

5

Static

static

1

triage-rep...om.zip

windows7-x64

1

triage-rep...om.zip

windows10-2004-x64

1

triage-rep...y.html

windows7-x64

1

triage-rep...y.html

windows10-2004-x64

1

triage-rep...dy.txt

windows7-x64

1

triage-rep...dy.txt

windows10-2004-x64

1

triage-rep...rs.eml

windows7-x64

5

triage-rep...rs.eml

windows10-2004-x64

3

triage-rep...al.eml

windows7-x64

5

triage-rep...al.eml

windows10-2004-x64

3

LAST CHANC...ce.eml

windows7-x64

5

LAST CHANC...ce.eml

windows10-2004-x64

3

email-html-2.html

windows7-x64

1

email-html-2.html

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

triage-rep...aw.eml

windows7-x64

5

triage-rep...aw.eml

windows10-2004-x64

3

email-html-2.html

windows7-x64

1

email-html-2.html

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

triage-rep...ls.txt

windows7-x64

1

triage-rep...ls.txt

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    triage-report_17971-launch_AT_launch_kyvio_com.zip

  • Size

    45KB

  • Sample

    240228-xn435sbe78

  • MD5

    29fb671843e0b2ce5cde66c586f88de6

  • SHA1

    6bc1d663e4cf61b13e1b82a22f8aa99da3f06232

  • SHA256

    32534a24872beb5e33020aff5d9e606961b8c1170e081428369e01ef43faccd9

  • SHA512

    e299a36716fb173518432a4d40287c9b05f0fb85689a30d3857e7dbb262b3a7b3cf92831fa2dff04c9548febcdb977c6629c52876881497f53c67ae6e3cf3a15

  • SSDEEP

    768:a27og2gTFBYUNywyEgIAlQGOilUfqPBDR94MReTzH2vcccx8OBBHTkD25KCduPc:5og2GFBYU4wyEzhcPKHTiCTEvmuPc

Score
5/10

Malware Config

Targets

    • Target

      triage-report_17971-launch_AT_launch_kyvio_com.zip

    • Size

      45KB

    • MD5

      29fb671843e0b2ce5cde66c586f88de6

    • SHA1

      6bc1d663e4cf61b13e1b82a22f8aa99da3f06232

    • SHA256

      32534a24872beb5e33020aff5d9e606961b8c1170e081428369e01ef43faccd9

    • SHA512

      e299a36716fb173518432a4d40287c9b05f0fb85689a30d3857e7dbb262b3a7b3cf92831fa2dff04c9548febcdb977c6629c52876881497f53c67ae6e3cf3a15

    • SSDEEP

      768:a27og2gTFBYUNywyEgIAlQGOilUfqPBDR94MReTzH2vcccx8OBBHTkD25KCduPc:5og2GFBYU4wyEzhcPKHTiCTEvmuPc

    Score
    1/10
    behavioral1behavioral2

    • Target

      triage-report_17971-launch_AT_launch_kyvio_com/body.html

    • Size

      19KB

    • MD5

      2f6ebc563da7876605be15f7313b4c6e

    • SHA1

      2365ae5cb176523cc8d7ecd6bc9d864906e7af7e

    • SHA256

      80bb775d9baa65c2d1b4f79c053cee1d45720ef9214f1229a089942084b7f7d1

    • SHA512

      66f61789c9a37a4621ef049bf84b1fd6f0e9d9cdf4642b45675b39acab0e1697ff709d1ecce674d3995c1750fa51977dff85566d6769e547c0b5fae3580d4e41

    • SSDEEP

      192:h5y3KDe8JkXUXRUs6jnxQVpNypkdI5CvLI6kgJMEmwYfvN1Al/kJdY3Ruw9hPd9n:/uYXRX6TOjTJjmhytNziha

    Score
    1/10
    behavioral3behavioral4

    • Target

      triage-report_17971-launch_AT_launch_kyvio_com/body.txt

    • Size

      4KB

    • MD5

      f21e804d3461fc35ad622411aabc21e8

    • SHA1

      75699f2faed88a8a4ace30af427102a2756a8e0f

    • SHA256

      ec22b9d5168bab35794a4127d4f8651b82a32a134d21235d265cdf94ae8c0470

    • SHA512

      ad69cdae38130d7f555d34c32bca5a4c5fa645592f018d9bd6707a83771db9ceace93f55689c89dbf295a3ab86639ea958d598d541b394d87c94af831315a37e

    • SSDEEP

      96:XCkra7gK0YGZQXt/tpEDEUy5tiUPwgBONNzluRo70eGaoeTzQcQ3TQK:/axwQ9zEDB84Qw7oooeGxCzQcQ3TQK

    Score
    1/10
    behavioral5behavioral6

    • Target

      triage-report_17971-launch_AT_launch_kyvio_com/headers.txt

    • Size

      7KB

    • MD5

      e68d79b2917287eb5009082cd429ddce

    • SHA1

      a3749ba96241b1eb69bc06216a7cf54043bc62b2

    • SHA256

      2dbc95213f96406e116e8369eb201f3d82531506c4f612d2931c4671eef599c7

    • SHA512

      b9bbec32c27bbb353f396766dc1d2412480c51e0d95b32a0d207c341097e3054829133e2ebf83bb30170692506e5563ead5ff04ce83b812096ea02bf52edd3df

    • SSDEEP

      192:T7KohiAz0eWamdXQXsN4wXS/+0rpZAOk8KSrtXOeSBO:T7KohCamd0vwCm0rgOk8n9SY

    Score
    5/10

    • Drops file in System32 directory

    behavioral7behavioral8

    • Target

      triage-report_17971-launch_AT_launch_kyvio_com/original.eml

    • Size

      62KB

    • MD5

      b9b415231807168bea12115743f74f1b

    • SHA1

      82b6f648319bf6f04023ea4153ee79b39b1d9382

    • SHA256

      f6da42ac5e7d3f082e7e9140a2fc57532fc1d9100f1cf14ab38a44d8b13f5b1f

    • SHA512

      c1179fab42525fa055ac02b2dfa7fa8f09710e38f6a12ee125a198b9e5985d4a743dd426fe6f73bf5fdd25bdfbe4c655e590647b9015215e2e0be97b76968d84

    • SSDEEP

      1536:wmga9YwiaZBNRHEMjvxKoCSYY740Ov0Ds17uDElUgSnaEbw:wmzhNR1RCtY0VpdoXU

    Score
    5/10

    • Drops file in System32 directory

    behavioral10behavioral9

    • Target

      LAST CHANCE to get my new app at a one-off price.eml

    • Size

      32KB

    • MD5

      766641ec99addb0e5c77fdc24983ccde

    • SHA1

      0f9cbad9fab7d535e61c41b3f5912368fc07f606

    • SHA256

      082a3cdc7133d746bcf7f47b56211c9a662bc70841ebe04cbe1328fd304485da

    • SHA512

      e32d362a68455811f697b4eedb10d2802d10228ea0e785e01d1a69ef43e64dc7b2a1543cbc3933deb0ebe902db67461a1c6265867def49464c448e8bbd31df3e

    • SSDEEP

      384:RCamd0vwCm0rgOk8n9SxO9roe3ECgHj5uWlCMpxJGLhYqJbzDLZp05zsbj:LmdEYa9tN31gD5TIbJDj0Kbj

    Score
    5/10

    • Drops file in System32 directory

    behavioral11behavioral12

    • Target

      email-html-2.txt

    • Size

      19KB

    • MD5

      2f6ebc563da7876605be15f7313b4c6e

    • SHA1

      2365ae5cb176523cc8d7ecd6bc9d864906e7af7e

    • SHA256

      80bb775d9baa65c2d1b4f79c053cee1d45720ef9214f1229a089942084b7f7d1

    • SHA512

      66f61789c9a37a4621ef049bf84b1fd6f0e9d9cdf4642b45675b39acab0e1697ff709d1ecce674d3995c1750fa51977dff85566d6769e547c0b5fae3580d4e41

    • SSDEEP

      192:h5y3KDe8JkXUXRUs6jnxQVpNypkdI5CvLI6kgJMEmwYfvN1Al/kJdY3Ruw9hPd9n:/uYXRX6TOjTJjmhytNziha

    Score
    1/10
    behavioral13behavioral14

    • Target

      email-plain-1.txt

    • Size

      4KB

    • MD5

      f21e804d3461fc35ad622411aabc21e8

    • SHA1

      75699f2faed88a8a4ace30af427102a2756a8e0f

    • SHA256

      ec22b9d5168bab35794a4127d4f8651b82a32a134d21235d265cdf94ae8c0470

    • SHA512

      ad69cdae38130d7f555d34c32bca5a4c5fa645592f018d9bd6707a83771db9ceace93f55689c89dbf295a3ab86639ea958d598d541b394d87c94af831315a37e

    • SSDEEP

      96:XCkra7gK0YGZQXt/tpEDEUy5tiUPwgBONNzluRo70eGaoeTzQcQ3TQK:/axwQ9zEDB84Qw7oooeGxCzQcQ3TQK

    Score
    1/10
    behavioral15behavioral16

    • Target

      email-plain-1.txt

    • Size

      14KB

    • MD5

      7935d7ec1eb4ae97836b2598b74050e7

    • SHA1

      d7a1c6b26a1816dd3256a125cfe8c8d3aad813ce

    • SHA256

      b8335df3287c4bfb714377a7ceb2daf3d9cb7449bf69ac4e3fe2485603d55ef8

    • SHA512

      d62dbaa47ad7e6951e51aed926f032306d655c7a9b9e2ef716256010b80e5d676aeebddca6a165e4ef20bb04f1336215eed33136a939d9febb48d3cc6934c686

    • SSDEEP

      384:HbqtCamd00wCm0rgOk8n9SNmMjOYwiO8O3PZ3FnzlgWAB:gmoEYa9YwiO8uZPgWAB

    Score
    1/10
    behavioral17behavioral18

    • Target

      triage-report_17971-launch_AT_launch_kyvio_com/raw.eml

    • Size

      32KB

    • MD5

      50e3a2d66d47aadaff57ae31d05e62ca

    • SHA1

      3a591c075861d3d86d841de543aac1be4779345a

    • SHA256

      066241d2f8190fcffebecb367c44706958d6e252d767742aa478448450b2e87d

    • SHA512

      eec7088ab96bc6acee24f653c833f45604c44ac419ef386acf9527efeed2a74f77cd4de8f419a2365ee4ea9ce4be3df0c4bd7584061e02baa3f13d542bb9164a

    • SSDEEP

      384:T7KohCamd0vwCm0rgOk8n9SxO9roe3ECgHj5uWlCMpxJGLhYqJbzDLZp05zsbj:T7KobmdEYa9tN31gD5TIbJDj0Kbj

    Score
    5/10

    • Drops file in System32 directory

    behavioral19behavioral20

    • Target

      email-html-2.txt

    • Size

      19KB

    • MD5

      2f6ebc563da7876605be15f7313b4c6e

    • SHA1

      2365ae5cb176523cc8d7ecd6bc9d864906e7af7e

    • SHA256

      80bb775d9baa65c2d1b4f79c053cee1d45720ef9214f1229a089942084b7f7d1

    • SHA512

      66f61789c9a37a4621ef049bf84b1fd6f0e9d9cdf4642b45675b39acab0e1697ff709d1ecce674d3995c1750fa51977dff85566d6769e547c0b5fae3580d4e41

    • SSDEEP

      192:h5y3KDe8JkXUXRUs6jnxQVpNypkdI5CvLI6kgJMEmwYfvN1Al/kJdY3Ruw9hPd9n:/uYXRX6TOjTJjmhytNziha

    Score
    1/10
    behavioral21behavioral22

    • Target

      email-plain-1.txt

    • Size

      4KB

    • MD5

      f21e804d3461fc35ad622411aabc21e8

    • SHA1

      75699f2faed88a8a4ace30af427102a2756a8e0f

    • SHA256

      ec22b9d5168bab35794a4127d4f8651b82a32a134d21235d265cdf94ae8c0470

    • SHA512

      ad69cdae38130d7f555d34c32bca5a4c5fa645592f018d9bd6707a83771db9ceace93f55689c89dbf295a3ab86639ea958d598d541b394d87c94af831315a37e

    • SSDEEP

      96:XCkra7gK0YGZQXt/tpEDEUy5tiUPwgBONNzluRo70eGaoeTzQcQ3TQK:/axwQ9zEDB84Qw7oooeGxCzQcQ3TQK

    Score
    1/10
    behavioral23behavioral24

    • Target

      triage-report_17971-launch_AT_launch_kyvio_com/urls.txt

    • Size

      2KB

    • MD5

      b36c86d88f83c455650aa4e108ab6c2a

    • SHA1

      de6e408da97788009398a84e97fd135367fe2b17

    • SHA256

      96c07b62868ea1fe4d035adac9059c7311a655b611bfc2b790742a47a0cc4213

    • SHA512

      d7787d600e4b3fe56680e528c9895c20089fda682f3739af407be7da8fb8552d11164b54e65e9aef9fb6096658611fe89b6069d741b7b725b4caf58fd71fdf69

    Score
    1/10
    behavioral25behavioral26

MITRE ATT&CK Enterprise v15

Tasks