General

  • Target

    004cef36-7a38-bd94-79dd-aa9e8281b504.eml

  • Size

    35KB

  • Sample

    240514-gt67padc3w

  • MD5

    565c89538267311b66b24f060019df15

  • SHA1

    2d469850a4250d39112b21059ea0ef18cb204acc

  • SHA256

    3697304ac040e17cecc45355b000c50b07b78d8e3b084f2623b0a575f2467ffc

  • SHA512

    0f37979b4766e19db596ff15a1b6c3f6fb13996ca9319760721af22050e5b727b6ed81898c9912c73c95e522c58bdb9aa6fa6d899dcef9ac8ebbe977abfa43ae

  • SSDEEP

    768:cRgYRj2sjMh7OQH6/C0lrthNYwSfX7kl/:cRgYRj2sjMlOo66WPNZh

Score
6/10

Malware Config

Targets

    • Target

      Manulife_Fax-Note-Transcripts.htm

    • Size

      5KB

    • MD5

      0c45229a5fa9209a6c0daed86cc292eb

    • SHA1

      2e7a0157560f8135a9bcf273683bb2dc9752b74a

    • SHA256

      8d220f3156705fe4ca03f3004df305e31709ffe9f6c8ac8d8581512b0eab521b

    • SHA512

      993e45492a759e5acfd2c4ff56b8c7ee82bd91ce0debbf074e63f1c5d35e82f784379fe18fb7eecf63d1b0bfc74aa9d682ec546e4e7fdf450cf0d15a29036600

    • SSDEEP

      96:PS1W/Vk7Gjl1DvGWUYlpMPZABu4tiJDOE5+xGKSIuEiYcJiS2AncGc27ya1FHKOK:K1kV0GjlZvGWUYwPZABPtiJDOE5+xGK9

    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      email-html-1.txt

    • Size

      6KB

    • MD5

      d833a93bca29f06f045195038294b0ba

    • SHA1

      47294ea912141df9117e64d1ba30b779bbfbaf98

    • SHA256

      413ffc68381a93c545000e406570f3af678dc9943ca107e1765334d8ee15e534

    • SHA512

      295349757a8ab752698629c12bb0949adbfbc061392da6d4621ad1f8f95e25b7cd721c1d789ccec39f70322afd09be0684cb7bd2f2509b214a0342987c642c87

    • SSDEEP

      192:hHuqLHq+BrZqCprZqjCBrZqhkBrZqvgGlqHHxCkF:hHZeq1qCp1qjW1qh81qvgjHHxl

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks