General

  • Target

    Document.zip

  • Size

    14.7MB

  • Sample

    240814-1tnvwsxcme

  • MD5

    b496da300fcd829a4f664ef8d1719af4

  • SHA1

    15289f4a1824f50c9cf30a3572734833ff203d7f

  • SHA256

    ce08cdf4895f278b15592322e7c317daa3df8c42e76fc559cf88b89a53f1ab2e

  • SHA512

    a0b408518d414797089d0654e11386ab699a4ac91d095fc84fd05ded949f3a29784e7c86ee3a4de867f367632a1b582afc9be811de8e08ecfa20bbe0dc86fca8

  • SSDEEP

    393216:t89seE7F7EQAGGbkQqQZItvhTv+RfjqgvzpDnt7aYhRzLQvfob:t8tE7F7NXGbkQqQZItvV7Qznu4sYb

Malware Config

Targets

    • Target

      Lib/email/mime/application.py

    • Size

      1KB

    • MD5

      3694543b1f5ba8545787d841b01b6554

    • SHA1

      286bd4f89559927558a157a054c01bfcb2271034

    • SHA256

      8911432a19145a0f8d3a869bf9d37bd5b1325c148bcc2196859543714f30162a

    • SHA512

      d952021f7e76fa9ee3c8e62b7131bdb9d12bfb3db988e0bc5211a4451e38e1550221785cd1dbf6889bcbe7d081a195d50ce4c9e186494174ea191f448bc4989b

    Score
    3/10
    • Target

      Lib/email/mime/audio.py

    • Size

      2KB

    • MD5

      032f9685d64f2e7fa6e25478661277b4

    • SHA1

      ef3d80537f049401798601a14fcaab47f408b46a

    • SHA256

      983c68c0876371a4b4079b94f161ac2f0199a453b28cf3fd7d2d23ffc9908cf4

    • SHA512

      f94b1b4285cefc24055c41c2e197e824ff8b1c92d13e76cb6f5d67083c5f5ca2cd563bf3d0afca7fdb33be542e53e72b23d1d296475880e8313089500bb49340

    Score
    3/10
    • Target

      Lib/email/mime/base.py

    • Size

      946B

    • MD5

      643733d8fe05fdd29e434355bbe37884

    • SHA1

      03bfa9094629480466050858ca260dc598955a30

    • SHA256

      fd0c74ee4cb66e0ab5f53ef93662c490e7614d25471e70ea5c2f4b8b06b047f4

    • SHA512

      e0467cb5b333acc2bc432623a266080795a8ad15d01093eb14701b1da294ff1f5f08d6e439c9ec2747075c8aade45618f1de2095b2dded97afaeca1750862987

    Score
    3/10
    • Target

      Lib/email/mime/image.py

    • Size

      1KB

    • MD5

      16672caec96d7917aaf125dd7276647e

    • SHA1

      24f2a72c284e3f5dbb7c0ba032a0b5dbf07c1e7b

    • SHA256

      ebd84bb4e0b237c8028fd82213b912c45ce6c8f0ac523e6568e615c2026c84ac

    • SHA512

      2ea9e30f507f8a5fc7b2a9618e84a8936f890f834e189f9dcf4c5880991537efba50c9951df67663fca79c0a45d3d3abf69747a7840112dea7d4a62cda632820

    Score
    3/10
    • Target

      Lib/email/mime/message.py

    • Size

      1KB

    • MD5

      7a30e752ac45c95126d9e4164bee4ddc

    • SHA1

      178924c1be52f2d59a135b5f7d8c6bd7293f2076

    • SHA256

      4915fddefcc2702d8771dae38153b5fa2409dc65d1b37e1d09d86b9ccfeaca31

    • SHA512

      717896109844010bbc6c47b6a4db39f2ff04c4215cfc5397ccaafa67aee81adfe487703cc750c988ad33be4a6bb7ffe93d5c3262c3f20dec44db9ee31d05ceb4

    Score
    3/10
    • Target

      Lib/email/mime/multipart.py

    • Size

      1KB

    • MD5

      78c5928c8d1c5b8c54afafb82ee66e44

    • SHA1

      5374afab02efe45ca721e84f70e973bdd426c2ed

    • SHA256

      804cc010c1ab4d5230a6b56e31167421908b9bca265a7e0bb516ba34a8c1b6f2

    • SHA512

      2b348b3246e60de9943e8fca20a166402aac62eb3abf290ac18a9368f07aafdc25da31f84c9c0e2ccfc5c12afa77cd8689e638a3629e2e378a92cff3bcac7a84

    Score
    3/10
    • Target

      Lib/email/mime/nonmultipart.py

    • Size

      713B

    • MD5

      5a28752e8a554879414a02d5d648ea84

    • SHA1

      3f9fd11de698eaab753991c7253c0ff762656d5a

    • SHA256

      f6493f0506df33ddc4b6b349bc1280ba374d4db6e86f43411bc98a062640933f

    • SHA512

      6f7f3fb449a47b91bab42368ceec5219370c90887a342126b4c1cfe5b8327488a772e4648c599a1a6b7bf282a0b50e29ac620b7c71ed6f80a09068b0a6a705b8

    Score
    3/10
    • Target

      Lib/email/mime/text.py

    • Size

      1KB

    • MD5

      e9b16e7b5e7426500f70c0ec09224ee4

    • SHA1

      dc8f36213042123c9181119d6f00aa6f65a542cb

    • SHA256

      6db0003d37c87360177ba09299d3f4c3ae4d051389d6c6f997e38149c496624a

    • SHA512

      a27f295c1cde4ed496b7336f1fb107791e2b0db4ea86dbd60c047722612fbb9150a4718f1c27b80bd73a910ab6f41ec15a5ceb8112410eef39f3763858ac8b04

    Score
    3/10
    • Target

      Lib/email/parser.py

    • Size

      5KB

    • MD5

      733c13463be8e3e9ff0f7f9580f81890

    • SHA1

      fb513e85f27dac34ae6d6233a48d118a04c5725b

    • SHA256

      2a4247867376b64ee4fd66952f348305aa74ebb5484bc247e0c1d6ad63781b8e

    • SHA512

      d3468f37667a47b3601be4dcb6e7ffc0749a0d0a7673f93073c23d713854b043f0927819d4028efff6cb58e16074ac437406b52c625d1e2fd1e00aaef380caca

    • SSDEEP

      48:2XyKLTo1bb9AHs5ofboK7bG7RGTBMnM4xBw3X1aFFGawps2/fboKhyuRGTjg6DBf:2Xzo1bb9AwOUOGRsUWOonrXUluRQg+0+

    Score
    3/10
    • Target

      Lib/email/policy.py

    • Size

      10KB

    • MD5

      b50d054f2baf51c93f864fc45ed046bc

    • SHA1

      54d6b86d09abe1a2ee1d15c57e9b9e31007c12a6

    • SHA256

      44b91e9f5d7b510ef085f426daa6454fb339ea46ed8ac5302edf84ffe4f9f3a7

    • SHA512

      6fb8ec11f4bf196f1ec74ec874add8193ad6ff571d471177f60923333d8b3d58bb1b9bd3c510d1aed68a82e71426cc17839f741137696b9d13bade11e0465a49

    • SSDEEP

      192:Qv6SMMmTGSigeS0LiEUjoEfgT78kskc5UeKEaYpw9x5bTCBa:Qv6jvTGOvPovT78KeKEbe97TCE

    Score
    3/10
    • Target

      Lib/email/quoprimime.py

    • Size

      9KB

    • MD5

      91e0134c7993b62df821299cbfe9cf20

    • SHA1

      3e647d829457fc8e76b5d36ed31aff8f383b004f

    • SHA256

      0ac88715c424e80122e3d861bbacc20ee289562f2c685aefe40b88471515a1bd

    • SHA512

      dcc68ced12bc04dc7643fe0b636af764d7136ed203eb1e74e2b669ed6349e62f5fb6022cc86dc03b4824dfb1e8ef5d59ee648dc9d015a0a44641b6cd01eb22d4

    • SSDEEP

      192:/3mMHQE/phvw+cxdP6AwkAZFAFx6Rr7qsXDTFaUf/B2m/fbweCMBsTmam8k2LHd:/t/phvEHzw9ZFAArbXDTvXC4sTcA

    Score
    3/10
    • Target

      Lib/email/utils.py

    • Size

      13KB

    • MD5

      ae01b00b737eeb26f6b1a7f13fd5e07a

    • SHA1

      2cd748c706a7b3a7ab9d7b930bea3dfa05b219d1

    • SHA256

      521840d2f6a4500babaf7df27a2b1fed2e05ac0350baf367d5454c09acbee525

    • SHA512

      987bcf23cf619bd279c32dc2a70f5f3355300b825d6af185ef615b6e43361f346b823f74d1234f54441d838b1c7ffea152275a2e5724f56a6fd7a931510dbe59

    • SSDEEP

      384:+GXDPOM1Dlx0rReFY2yHhDYlYZInHfrVDVw:+GXDPOC/0rz7HhDYF/rg

    Score
    3/10
    • Target

      Lib/encodings/__init__.py

    • Size

      5KB

    • MD5

      7e6a62ef920ccbbc78acc236fdf027b5

    • SHA1

      816afc9ea3c9943e6a7e2fae6351530c2956f349

    • SHA256

      93cfd89699b7f800d6ccfb93266da4db6298bd73887956148d1345d5ca6742a9

    • SHA512

      c883b506aacd94863a0dd8c890cbf7d6b1e493d1a9af9cdf912c047b1ca98691cfd910887961dd94825841b0fe9dadd3ab4e7866e26e10bfbbae1a2714a8f983

    • SSDEEP

      96:VHdpCpI/qD2Q0pU8F6fdaLcbkCN/yRMffWL1+rpOc6i7AYS2kEJlQ6w1AD4:XpCpIPpHEN/yYi1+NOc6IAYS2kEXQ6wr

    Score
    3/10
    • Target

      Lib/encodings/__pycache__/__init__.cpython-310.pyc

    • Size

      3KB

    • MD5

      5e9b741ed1d373c36d5481882c477029

    • SHA1

      e148b62b67e89b87e1a736a9bf18c2a79a17aabd

    • SHA256

      95d9f483865a0318041891ed1293661b03060d7f4ba3a824a89337854908b05a

    • SHA512

      1384756ab9bd1b1e3609aaa4e65b2ea58ebbbc880e548616b310e2e49cf0788e4b26fc376a8f7a05de141bff35753228e5e5cd3640f987d5bb3e1748e0971f25

    Score
    3/10
    • Target

      Lib/encodings/__pycache__/aliases.cpython-310.pyc

    • Size

      10KB

    • MD5

      131827a51d2c7b25fd0fb17a428a1629

    • SHA1

      b4590bb42ee60a74f46cde84f037f4a60e1ec8f5

    • SHA256

      f0c5f174b36e90054f4153d58b2873a08776994a60f6392237cb69402c233ba5

    • SHA512

      3e986594308a222a53bdb4e0757270c906a1951b0b2598c061ce63c81d055749d4cb4c222d4df575ea17c01fd96635fa76e3ed6d07d3d94d00c0a70c64bcdae8

    • SSDEEP

      192:uX2eNkBweGfGkueK4+I2Zyu6UtXqxUZH1iGzxOkq4bpehh3qkyR0N:uXG0bueBI6Yzx9IX6Ri

    Score
    3/10
    • Target

      Lib/encodings/__pycache__/cp1252.cpython-310.pyc

    • Size

      2KB

    • MD5

      ab6f0014a9cd6a20eebaaf5327eb503c

    • SHA1

      cdfe129377ef55f89ac928fb6ec01c687bfd8b24

    • SHA256

      ed06daeea59db8c828404f0f5bc4f049eabc84dc703f1bc60450ac3fdde63402

    • SHA512

      f405b19abb119507be1f5e407d4a5a496872e51b7c2196f4a3ab119de99a8f3428d81848ca4c0b4a5f51ac101a8a75ed3e4c993c4047732c71c6f78d87e6caec

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

stealerbraodo
Score
10/10

behavioral1

discovery
Score
3/10

behavioral2

Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

Score
3/10