Overview

overview

1

Static

static

1

Beauticon ...ns.pdf

windows7-x64

1

Beauticon ...ns.pdf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Abuse and theft of misleading domain beautisconvalley.com .eml

  • Size

    146KB

  • Sample

    240521-tyg5ksbg8s

  • MD5

    60f9de2ebc860873ff7a94f5ecb955f9

  • SHA1

    bd6d40c1540302fbd18032c5eede1ec1debb01aa

  • SHA256

    f54022e9e160de2321599b85378b7d27f10ec9efa9c66ee09276da5dc04eea0a

  • SHA512

    5131d822b3dc4bbe1a1f4cd552f423e0e49fd479dfc6f2dd84acfb471998b8ff927f9f269b604c80268b44cbb844a47bd40fb281ff6aca8750b5ef797ae71917

  • SSDEEP

    3072:ONJxL3GC58rQxsn0Cl6tgD3D7AfTOHbeGJIkdaerx7phE:Oiys0g/Df8OrWk8etlhE

Score
1/10

Malware Config

Targets

    • Target

      Beauticon Valley Holding Wiring Instructions.pdf

    • Size

      100KB

    • MD5

      1f980998deb3bbb4c47755db73deb4bd

    • SHA1

      6fd55b55ce8a1cde403907e5857b20697256d3cb

    • SHA256

      d61b1af13a1ac06149bdd147d85715e40b9fcdd1d45c0fadb6400ecdbaac5676

    • SHA512

      be8bee2edbbec74ad684b36fda630f610a4267c6a9e9f301ca2ee995f76726e70480fd186f51b3ee41691655ad73c9fe15fb891606ce4b3609207f7c29ed5479

    • SSDEEP

      3072:4z2Ko8H23HM+BRRYxvM28j8BjNapHYrFEFzFU:4z2aWdHsE34Lq4rFEFzFU

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks