9a1497e74843e5ef4f67481121ffa8149c777764d87aa11e78d8540e4b122c29

Sharing

Copy URL Twitter E-mail

General

Target
Archive 2.zip
Size 1.4MB
Sample260506-1mphvaft5k
SHA256 9a1497e74843e5ef4f67481121ffa8149c777764d87aa11e78d8540e4b122c29
MD5 864182c0c4d7aa6fa384cc26dc6c02c4
SHA1 a92b1ac7da78ca2d8738c37f25c2c4ee9799fe9d
SHA512 57b2c090cc7f203c0b5cdd3b9d37cc52ce91aba7be9038d703813be837c2a50c1210c8f215b3bd4ca0d93e8bb17b806700d35d252cb87c5ff7078d1ef5297332
SSDEEP 24576:HzmKMpnRXWUNQY3RBaA1WEGaPYMXvt0j7Jz7iyL8EK9eY/Hvj88/HK1x4:HzmHPXJmoYMo7JzhL8CqHvjv/+x4
TLSH
T16D6533A24E506688D6FC6B33897D5B3255E1A0CB3BBBBA91748547C44C1FEC7ADC22C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Archive 2/00_Production_Exhibit_Index_and_Synopsis.pdf
- Size 6KB
- SHA256 fe753074e58f3a09aebf02121e57956756cb50660cb3fabf386ce3b9535ecba0
- MD5 8943b93d7585eb48bb0c4f9af5a45af8
- SHA1 16c89031def614a885d9426ed18bac359ed90b3a
- SHA512 8bc033247e9abc18911756662d0b69436f20ef1d6d5159fc80216d7b3c8ebfa58c67d1c3fa487d8828501c65aa662ec208eb589264c304a07a1822bc16f5ebf0
- SSDEEP 96:1tdkFyAA5vqIx2YCMf91YeWtezJHzXYNXzS1SLJs5Z8FB5sOiBZf4lguc8K:iWOU9TOcwCmTQalguHK
- TLSH
  T154D14C6B81AC884DF443CC452B6F75EA866DB23391C87CA0216C4664718EE3D3E5FF85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1
- Target
  Archive 2/Exhibit_A_Damages_Spreadsheet_and_Transmittal.pdf
- Size 64KB
- SHA256 7bd6fe87c9dde39ac83d9721fd874c87ee57ca9120969b4dff87923438111aa0
- MD5 f21878252a63c9013eca3cff4f6b2953
- SHA1 8f10ba6f45b95a0d8f3314b9cd2864935b5befb0
- SHA512 8bb6685f8412e3f8a47a39dc532fca525154befcbf3f04ff3793822e438b7e4fba1252307a049091f2919d2429da518ea8a09418da9f324d374f11100bff11cd
- SSDEEP 1536:gfdumTXGw0tw5gAxm9GAXKiv05vmtCceDiz/qlnB0tUv519Di:gtbHGlb05eMyMSyv5K
- TLSH
  T16853CF35ED58692DD443D985CA5EB4AE5F4D327E31CC59922C9C2C8ACEC3980FCA39C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral2
- Target
  Archive 2/Exhibit_A_Damages_Workbook_NATIVE.xlsx
- Size 16KB
- SHA256 5d5f721408f0b774d7cefb88e34ec9551b64c1c0cf163f79c30b068bd1dd45cf
- MD5 53567f907c863924d67b3bf9f8b1cf7f
- SHA1 0a41a809c0b4622f149e51e937eb4363390555b8
- SHA512 636752f916fe17a7ff92b57401c65d6ca4249a8a82a4c46d96038dec1030b71b9cd46b37c2eb708fcdeb1e90dfcc25838328d88e9fb5514b4b0240ecfc7e8045
- SSDEEP 384:c6l4cp78A+GeVmozKH4nuYhQbfmjss+nb1rk+yLUIpnhX:vrp78msKH4lhUfyf+nO+QnhX
- TLSH
  T13872AF1EB601BD06C266583E512C05FE6197B4D181CAE00F2848F7BD9FC25C79B5F6AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Archive 2/Exhibit_B_Dr_Gibson_Engagement_Scheduling_Email.pdf
- Size 44KB
- SHA256 f1b53c8faebb47bf2067d93a33c940f8450b4162c8ef04e1969a1248b1512964
- MD5 77aa82a2964c60278e7eb207162e8a50
- SHA1 e81e7e43430d96d14df3c7eb79edf9b89b3bb3c9
- SHA512 8fe09c70facc0925643d952893bb5137e5399c65116b82512282e419c0a59e526ea114c8540c7df3993b13bff7c5f914e27480f3bcf9934f69facff6cdd5951d
- SSDEEP 768:8YcjhL7FGtpfosTECNUEeDv6xLNRX2yzetw0U7hwL+e0btWAxm92T3ls:8YcB5GtfTECCEeDChTXGw0twbgAxm9Qi
- TLSH
  T12613BE39ED50AA6CC442D8014CA8B46D8F9DB13E75CC64913CEC2DD7CD8BE14EA63B96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral4
- Target
  Archive 2/Exhibit_C_Booz_Allen_Termination_Communication.pdf
- Size 79KB
- SHA256 2f9a4ead63e57ab944a904d5a3b2456fa3d02fa5e1ef3f598bca60826fdf7dc7
- MD5 3f54d5bc7b5db9434b9b831d250c4b32
- SHA1 c9198613fe690a7029b21b6e17ce5ecd55b3342d
- SHA512 ff68ba166bbad8bf82460203d21046a69d01fef5995e764f4914210909bf439cf4f5d6bb1546d86918a65bfa62bf5b04f7d2d4f8f4420fa5166cdbc0275b2c98
- SSDEEP 1536:sR7/qZjn4jCTXGw0tw3gAxm9nYy/T3d3AyTim5JFrvKXqVLQ:sF/qZ7vbHQXYwTN3nTioJoqVLQ
- TLSH
  T1FF83CF35EE98B66CC443C0425969B45D8F5DB27A38CD24D12CAC0C8ADDCB904FA73AE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5
- Target
  Archive 2/Exhibit_D_NLRB_Materials_Currently_in_Possession.pdf
- Size 502KB
- SHA256 5227385ef4dfa076746808b6ddfc86463942d0fbe2eb003e25df114e2fec8221
- MD5 b9b6a696b6d8e246c04564baf85ae7fd
- SHA1 3ef1bbede44caf10d2ec7a3758823950b7cc1a66
- SHA512 4c94a5e55eb40f30b7d0c1844581ca23610beaf2795ac1ef31db1166a58572b055a72bdf030b010ee9b4f1f7ab96b90185ce1549b077df282adfcc827b192821
- SSDEEP 12288:5NxC28DNEEQqHnTgPlXd7Y69Ly/mww7tZEuG77xS4N71wYbMi36UBq1/Vadl8q:5zeDJ8HXG771NSi3RB+aB
- TLSH
  T1DFB49D73B689D8AF934BDF99C761B020170EF22371E12860147C9B5E61A2C94DF9F16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral6
- Target
  Archive 2/Exhibit_E_Deposition_Transcript_Pages_80_81.pdf
- Size 261KB
- SHA256 851c63c05c0eaaa986b77db60d6493e40024d284c31929c1679819a90589f3e3
- MD5 f5381f01ffabafcaaf94451d230e14da
- SHA1 322ea3bd18f77f9a946b5f34665aba15a3898bf6
- SHA512 2afb42500f45fa39d63beefb5f2fb36429b6f26569853a50edf0b2c5e8b0da2290e2b7017feadff9ebd6bccf292841aa0d8a1ee4eb8f2d70fc9f34ee0a2f7fb8
- SSDEEP 6144:TU+UDnZpBksNnJ52hBcP8yYhNxeJ6+NKQF64dM:ippJ52hBcEJaJFK6xM
- TLSH
  T171441220C8A8CE2CF3D7AB12D665BD8A4688F31767D425C234B8D7E18C56D48DDB2D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7
- Target
  Archive 2/Exhibit_E_NLRB_Deposition_Testimony_Clarification.pdf
- Size 264KB
- SHA256 b8ee4a58bcfffce3882d735f5485df7fda7ab2f15cb7ec541bd9c6fe5c10e556
- MD5 beead7c860e9e6de53aa97f04daa863d
- SHA1 88384d7dd47285822451356eb97ddb2388a53ba8
- SHA512 df3771cb56687fc799ef53ce5957117ff2ec70fa6a97d8bf09c10129f5f97d83c3a985996291973870295c6d14f999f04a3ee6a14be6807570aa5713132d8d1d
- SSDEEP 6144:QU+UDnZpBksKnJ52hBNP8yYhN4eJ6+NKQF64du:7pmJ52hBNEJ7JFK6xu
- TLSH
  T145441220C8A8CD5CF3C7AB12D625BDCA4688F31B67D526C234B887D58C5AD48DDB2D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral8
- Target
  Archive 2/Exhibit_E_NLRB_Deposition_Testimony_Clarification_Sheet.pdf
- Size 2KB
- SHA256 7e14b9e163e95ba10f38da9ee3b64ac35a9bd16fbef5cbd59908848a6b28bf01
- MD5 ca4a50528a489ceefaa16509bf099640
- SHA1 5f34922aaab29b7074d20696f9151c7d44fb12df
- SHA512 f46c1417d11111280a508109d4f821ab54fc7383343c305d30dff5e971ed74a3769e7308efc2b559decfc15b6817b99b970cca017f5cfdf320cce93a61e8a825
- TLSH
  T1E741A835EC5C5C48E942D88586687AEB196E702397C03DA0109D87CCEC4EE2DFE56BD7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral9
- Target
  Archive 2/Exhibit_F_Rahsaan_Transcript_and_Prior_Transmission_Proof.pdf
- Size 90KB
- SHA256 9ea05df4da133e0e71e21a7d36d52314cadecbab2c94154307cec91eaf42f3e2
- MD5 6d962c57245b09ef358c3b9a1314826a
- SHA1 c6d8b5e1beb4f609219309b0bb5fd2f2ea97a097
- SHA512 9cda30b06bb80d20629e6b6e2a938ab3ae6cc95810b3cb4125459bca2d5e37e048c93ba82a8eb45ac5dcb609b94d889273265d2d5d8594c0e14d67c60efee1fe
- SSDEEP 1536:VVSmdj8vywPtP/q06TI41Oj9tOWf2ThTnYjR2GKjnZmxQlR7JTXGw0twxgAxm9DQ:DPdwPZuIWOCThDYjOnZmo7JbH+P8
- TLSH
  T10993C135EAA56E2CD402C90166A8355E8F5DB27679C835C12C9C1DCFE8C7864FB237D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10
- Target
  Archive 2/Exhibit_G_May31_Job_Search_Production_Transmittal.pdf
- Size 50KB
- SHA256 2b246376647def497eea672de38a36cfea0adcbd5418ab1d798d1760f287508b
- MD5 20f6d5d45f0b0a7281a3367b61c0b449
- SHA1 e8c0284e0cbd3bda3b6962c5e6d124f8c81bec0b
- SHA512 49e3cb0cab7442a395bdb804b6ea7a14644458584d38208a2946d7f0e18539386f387e985dda74a962dac8e359ca34c0cc1d6507ca9f11cbe983338c6f14dac8
- SSDEEP 1536:6RDZk1ixGzGl+jMATXGw0tw/gAxm9H2LEQ:6tZk8xG/pbH4oEQ
- TLSH
  T13F33CF35EE91AA2DC842D80558ADB49E8F9C727E75DC21913DDC2C87CDC7810EA63AD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11
- Target
  Archive 2/Exhibit_H_Job_Search_Summary_and_Retained_Materials.pdf
- Size 205KB
- SHA256 2ac782ae4cb3a918be146cf4c552b29e200127e742b7442054ab718dd5d55f50
- MD5 90b5d98f9646108ae8614d1f562414ad
- SHA1 8f27af1e48fed410dd009c96b6329bbbec109f84
- SHA512 b7da2535ec94a0b954d841372c1436af10c88244ffee38b900e033c968e2df96f87e5b252c6b9b83fd3b49d5c7e2eb0548155332a72a7ad1e4e9253fe9c22448
- SSDEEP 6144:KkYao1aLP+/BZLbv45HBpsM15rV1+bsfBS:KkYbkG/BZLbQR4M15pgbkS
- TLSH
  T10D24E135E5627D8DE482C24266693C6E4F2EF37379C938911C2C494A64CCD98EB671F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12