Overview

overview

5

Static

static

3

[EXTERNAL]...03.eml

windows7-x64

5

[EXTERNAL]...03.eml

windows10-2004-x64

1

=?UTF-8?B?...?=.pdf

windows7-x64

1

=?UTF-8?B?...?=.pdf

windows10-2004-x64

1

=?Windows-...?=.png

windows7-x64

3

=?Windows-...?=.png

windows10-2004-x64

1

email-html-2.txt

windows7-x64

1

email-html-2.txt

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

Resubmissions

09-03-2024 01:45

240309-b6vfrscb5v 5

07-03-2024 20:33

240307-zb7plsdc74 5

07-03-2024 20:30

240307-y95ggaea4y 5

07-03-2024 20:26

240307-y79cmsdh7z 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    [EXTERNAL] 2024 Benefit Enrollment & Payroll Handbook Booklet Begins 07_03.eml

  • Size

    39KB

  • Sample

    240307-zb7plsdc74

  • MD5

    533fd89353fbdada567744db2195f8f4

  • SHA1

    7695f77553d87656ee7a79c80542f23b0b1a1640

  • SHA256

    426f5042fee24e43a40766d8eb7da99a1e0e373379af5b4dde0e355b7f5d9c8f

  • SHA512

    71696f0d45311d4bcc7be1b9a401f473fde4fe2bc9e67b1f1e5ea75c5be1e6854f181354c8aba3ca1e030d3e92dd57faacdba9baf524242706b1a0f1f31f2504

  • SSDEEP

    768:8ZNoUDeMbPrKq7cTk//IYmHilbNpksVSqo/5LGESjcVV:8z3brrLcI3IYmSUL/lHSjK

Score
5/10
linkpdf

Malware Config

Targets

    • Target

      [EXTERNAL] 2024 Benefit Enrollment & Payroll Handbook Booklet Begins 07_03.eml

    • Size

      39KB

    • MD5

      533fd89353fbdada567744db2195f8f4

    • SHA1

      7695f77553d87656ee7a79c80542f23b0b1a1640

    • SHA256

      426f5042fee24e43a40766d8eb7da99a1e0e373379af5b4dde0e355b7f5d9c8f

    • SHA512

      71696f0d45311d4bcc7be1b9a401f473fde4fe2bc9e67b1f1e5ea75c5be1e6854f181354c8aba3ca1e030d3e92dd57faacdba9baf524242706b1a0f1f31f2504

    • SSDEEP

      768:8ZNoUDeMbPrKq7cTk//IYmHilbNpksVSqo/5LGESjcVV:8z3brrLcI3IYmSUL/lHSjK

    Score
    5/10

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      =?UTF-8?B?VG95b3RhIEJlbmVmaXQgRW5yb2xtZW50LnBkZg==?=

    • Size

      10KB

    • MD5

      bd3a12d52669f561ec7292f97145eed1

    • SHA1

      dd1161376edc8e5be6eec47752b23961ed245c14

    • SHA256

      03a0a317daf0b61200ba338a91bd7902e957fe198d5a285a23bfffa289be9b8e

    • SHA512

      7f0c9fbd425cbde63363562a152bafb576eadc901638f2314550467d7592b1d5a4b7bce6912e46c5976eb8f869874c054948e284cf1d1fb95852e6f2c647b3bb

    • SSDEEP

      96:Bv9Rq3+rEhoLVrZE8lPo8ZMC83JdQPoAR/Evh9vuURp6MuEkOBBWBBFB2vByeBB4:bBQAe8lw8GC8LQPoARsvhxRp6MuEoFDt

    Score
    1/10
    behavioral3behavioral4

    • Target

      =?Windows-1254?B?dG95b3RhLnBuZw==?=

    • Size

      7KB

    • MD5

      9cbfe7ea91a7700cc8aa464c75cbccfc

    • SHA1

      b1a2321c3a121e97f6a649dc6384d21bd64f7e90

    • SHA256

      9e20f5adb831bcb3daeaf6d88782a1fa389d3dc4d8d49a9021b6585b367c7806

    • SHA512

      f9218321b330291bcdf48276b7ae1d9c38499e7bd06325b01bdd6f416fcac249a6c40fb9d82d8a47deedeb0c7cf3705388276654fb994783fd06971283daa8bc

    • SSDEEP

      192:QrxGh9VcV1RPxFWd8VL0QSibQPwc0kdqXx:g5F88VlgIiy

    Score
    3/10
    behavioral5behavioral6

    • Target

      email-html-2.txt

    • Size

      2KB

    • MD5

      841e762144aa292461a04214e1bda563

    • SHA1

      41ff1e726912be46ee1b676c6ac9d4426faed5e9

    • SHA256

      cfa446b102c049517ea77581fbe7ff858b9429b202ca4363b34f9c7f5aa793b7

    • SHA512

      b664689aaffbfa591af492394ca98da89022cd148458bebd88df1fe67fba6e24a09e4e5f6b6520ef502a8b9392374d54f962df64ffb7227b98193e7972edab83

    Score
    1/10
    behavioral7behavioral8

    • Target

      email-plain-1.txt

    • Size

      1B

    • MD5

      7215ee9c7d9dc229d2921a40e899ec5f

    • SHA1

      b858cb282617fb0956d960215c8e84d1ccf909c6

    • SHA256

      36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

    • SHA512

      f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks