967c79010413f26072acbd5e4fdfa0b65c8e72fb310986a24bb9939a2a86d02e

Sharing

Copy URL Twitter E-mail

General

Target
Quarantined Messages.zip
Size 14KB
Sample240610-g3ffbsdg73
SHA256 967c79010413f26072acbd5e4fdfa0b65c8e72fb310986a24bb9939a2a86d02e
MD5 68586bfa87f59c3f03162ca28fd0a796
SHA1 7abdc90d9f475c25b94a87a3b96a87ba98fa977c
SHA512 0788580233be36d426050de70f41a81d142221d3b8e8f96f08616c51843a7d409074a33af877f888acdff0b3969895d0560715ee7713703a78e910631ca7f533
SSDEEP 384:RymMr+2nifWFMK+jXIz76IrL2YoN9CCrdAaHK/pQs:XMrrniOZMC6IraYojC6drqh
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Targets

- Target
  Quarantined Messages.zip
- Size 14KB
- SHA256 967c79010413f26072acbd5e4fdfa0b65c8e72fb310986a24bb9939a2a86d02e
- MD5 68586bfa87f59c3f03162ca28fd0a796
- SHA1 7abdc90d9f475c25b94a87a3b96a87ba98fa977c
- SHA512 0788580233be36d426050de70f41a81d142221d3b8e8f96f08616c51843a7d409074a33af877f888acdff0b3969895d0560715ee7713703a78e910631ca7f533
- SSDEEP 384:RymMr+2nifWFMK+jXIz76IrL2YoN9CCrdAaHK/pQs:XMrrniOZMC6IraYojC6drqh
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  dd6a2f02-9285-4398-510a-08dc8704cc24/ae69a6ee-6604-e234-91a9-406715bf711c.eml
- Size 34KB
- SHA256 7e20b898673fa15cf35cd7ab1c1e754aa4f86940456f1938bf2f9e455685f4e2
- MD5 4ec625bf30ba0b0b3ecbdf3a7967bcda
- SHA1 f5dc8039ab2eeb0c96efefde0e27321450aab67e
- SHA512 a0ac8bb7ecb4bb867bd11d9576692e55e7c068c48834ab72b3e28057965aa5cfa3b3d9b2473a25a82ca62c1b87a215982d9735fb2e43f730847a1d2607fa6a1a
- SSDEEP 768:SUbVa91tWKHSyS5dXGbz+kdE2RVV7YusLrmnTwuYKTcNYgqIh:SUbgtWKyn5diS2RVV7YusLrmnTwuYtb
- MD5 SHA1 SHA512 SSDEEP
Score

5^/10
- Drops file in System32 directory
behavioral3 behavioral4
- Target
  attachment-2
- Size 26KB
- SHA256 e9c2a22f6979c2520d52179e7cbae1ff2fe562129c841d436ef7e8810247e77e
- MD5 5d9a39ed9527913da4888330f61d7848
- SHA1 e16d3a6a54fe6653e5c7569bce4949e88dc38a77
- SHA512 d594971154b1ee54dd5d5d8b54c3799f981c05a43120b22b1e3c1edb78633948aee9e99f6d6564dd1cfd2459047ff767adb0367b692583c09fc90075d6465df2
- SSDEEP 768:CVa91tWKHSyS5dXGbz+kdE2RVV7YusLrmnTwuYKTcNYgqI+:CgtWKyn5diS2RVV7YusLrmnTwuYtk
- MD5 SHA1 SHA512 SSDEEP
Score

5^/10
- Drops file in System32 directory
behavioral5 behavioral6
- Target
  attachment-1
- Size 5KB
- SHA256 52b25cb168e539e16717f92526a82321ea75479b183001d0905054d1ddf75fa2
- MD5 283776e1d45651b87f7559b5672c3547
- SHA1 3ba9d230963362df1f340e8c06f33794d4ad7d7f
- SHA512 b5bfbf516286702a72cb4e6e7f3e62316af36ae8c4c41143e506096bb25bd72a36cecda5f936eeb1dd38a1dfb25d8e7d66b4af544d1bfae421a4816b1d16ac92
- SSDEEP 48:1h7/NlDLUsZyuSl+pEoLLjEFVZbV2Fh82T6gM0UtY54lNq4iypqeLV3m50oodBpU:1hJVXZxTjQW6gMt+0HdBKS0fCMNRdkKN
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10
- Legitimate hosting services abused for malware hosting/C2
behavioral7 behavioral8
- Target
  email-plain-1.txt
- Size 483B
- SHA256 0852133127597f908c86e88efd0a657ea44dc37bb3005b743db965ef1c51c0d3
- MD5 6b000e82958fb295ba2ebf2e4b4ffd1d
- SHA1 16e3214a1d33a9746a9453c0e22ddb8a35862489
- SHA512 2f01c9cda7f1adf18a4e33ef694998125397520a3e2220150ecb4448633f1f7a59816a98109697b11d02f5a025c87fb6e5cfc859e9c35a60fa793ac4943a2deb
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in System32 directory

Drops file in System32 directory

Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10