Overview

overview

6

Static

static

1

Notebooks/...io.one

windows11-21h2-x64

6

Resubmissions

24/07/2024, 13:54

240724-q7tm7ascrf1

24/07/2024, 12:25

240724-plt66ayelb6

24/07/2024, 11:31

240724-nm2rystgrm7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Malicious.zip
  • Size 149KB
  • Sample240724-plt66ayelb
  • SHA256 04e140bf0eef8c26694cda1c46e5770ed0e7eee2d59c8d6f47a8d3d09e3c5c20
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
amazonmicrosoftdiscoveryphishing

Malware Config

Targets

    • Target
      Notebooks/Groneweg Gruppe Investment Portfolio/Groneweg Gruppe Investment Portfolio.one
    • Size 141KB
    • SHA256 f284da4e28e423659cf358270e081d402cbf853030abd01fd655fa9d4d2533f1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    amazonmicrosoftdiscoveryphishing

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand amazon.

      phishingamazon

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks