General

  • Target

    Olson & Burns P.C..eml

  • Size

    28KB

  • Sample

    240812-xmhhravcmm

  • MD5

    4722ae5fb3571d1e58ecf44a306b706d

  • SHA1

    4ff6b52acc49dcdc528ac79c192295cd66f95b89

  • SHA256

    8ab8294583b6937b89b29c23f8b04f4710c6059408e3620ede34ba25758c6001

  • SHA512

    d3fe89c0418e32483360123fdf489468f96d0875aa923ee4c1a40f63a877d418f52ae6456d2bd5d031ef6d3dc5784605716733dae63bfc13a2237d87be053541

  • SSDEEP

    768:d23+TNaFzPSnzSfnDoytfSAo0xJ6CXxQu4QgS:G+TI7SnzmnDoWfS3mdXyu4m

Malware Config

Targets

    • Target

      email-html-2.txt

    • Size

      5KB

    • MD5

      48331f0557a94d2e098b72883563bfc1

    • SHA1

      51877d317ab30400044d56d46264d1224ae99ff2

    • SHA256

      0add61c336144031f33ab21df8950011e7b98e0671d79cbc43cc658812ebe0cc

    • SHA512

      b11a0d18a5752cdc4ba0601dbd65c22b76d03934b69ff10843ddb1f40d6760a948c3a03d8b07ecd8778782f377e13332ed9b57c3599ac454eb678d4f180cd00c

    • SSDEEP

      96:Qg5JmJXt7Q0l3Q0l4gRQ0lKQ0lKQ0lutOGwYY8+64QlcQlcQlcQ0l3GvQvVLeJuQ:QgX+d9n5AAkt5W8+dRGwZmf6IkYw4

    • Detected potential entity reuse from brand microsoft.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks