General

  • Target

    a2bbdced91b72e605610ace6ce58403b.zip

  • Size

    49KB

  • Sample

    241123-tf8jtatmgr

  • MD5

    dc5d3281405067342b28527fd0e71b5f

  • SHA1

    46f0543499f4907d4bacbd0bfdd36d32be4b45e7

  • SHA256

    71abf2a9863ae79eb51740f45cb1dfcfc852586b08497306e3c82fe2060026de

  • SHA512

    a49d42f8e4a6a72ada545071626e37b79cee171509fe906ef20889dc35a15de5c8f6f26b856fb1a79013a74bd6a4a49bd6858f0328913c90eea0928ef448de6e

  • SSDEEP

    768:ZYrx1UpXAeAphfFagJtl8/K6pxO4VxWuWNtSauD/Of2UCAkphkA:k1UaeUfFzHufxmXzSauD/OsAkphz

Malware Config

Targets

    • Target

      a2bbdced91b72e605610ace6ce58403b

    • Size

      65KB

    • MD5

      a2bbdced91b72e605610ace6ce58403b

    • SHA1

      b5d9c9e7406a25cbceba31a92724bcec935e5931

    • SHA256

      2f326d7c7736c825555d3b1ba976d971f482b8812b2bb124e4485ecb182fab89

    • SHA512

      4e7ea0aee3aedf54b52c33f5fe58c3b6745e6e41adbf98f6aa398b4194ebb75da3af3cbc74ec75a6bf4600341956013144240628a5d5511525bbf9f1c55ac764

    • SSDEEP

      1536:Rvk6zrgATNBq7+8HBIeNswdZfCBp/zbGjwRHQ6iUW:Rv1QC8HBILwPCB9zkatW

    • A potential corporate email address has been identified in the URL: [email protected]

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v15

Tasks