4c407a47594796beb0f88ae7f854ef60d26ade3ccd8bc6d5f08b331475b4e062

General

Target
phish_alert_sp2_2.0.0.0-214.eml
Size 130KB
Sample260604-s886daas2w
SHA256 4c407a47594796beb0f88ae7f854ef60d26ade3ccd8bc6d5f08b331475b4e062
MD5 212280babbe757a135dfddbc4233763f
SHA1 25cc92c80219a3e6a621ced29499a4165d06473c
SHA512 a614b9c65960c1c5c56679f07bc148f36afbac451739364e3ec35ebe206e51c3f78ca80feb887541e8c8952f7f5f0db15a9fe1c125eab4a681d2b3a8c81eeaea
SSDEEP 3072:vVS0TR9liU3+FN8VYIfK2ZLRAezlC2hUPc2UwH5dX:v7/lxQ6Y+Kgn2Pc2t5h
TLSH
T1DDD302B1E59A0836093061FCF8847E8491F22A82AFD36450F97D71630BDA8125777AEF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  phish_alert_sp2_2.0.0.0-214.eml
- Size 130KB
- SHA256 4c407a47594796beb0f88ae7f854ef60d26ade3ccd8bc6d5f08b331475b4e062
- MD5 212280babbe757a135dfddbc4233763f
- SHA1 25cc92c80219a3e6a621ced29499a4165d06473c
- SHA512 a614b9c65960c1c5c56679f07bc148f36afbac451739364e3ec35ebe206e51c3f78ca80feb887541e8c8952f7f5f0db15a9fe1c125eab4a681d2b3a8c81eeaea
- SSDEEP 3072:vVS0TR9liU3+FN8VYIfK2ZLRAezlC2hUPc2UwH5dX:v7/lxQ6Y+Kgn2Pc2t5h
- TLSH
  T1DDD302B1E59A0836093061FCF8847E8491F22A82AFD36450F97D71630BDA8125777AEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  email-html-2.txt
- Size 6KB
- SHA256 80bfac78a18407e1647c169d5f5c890894f9a4260b3b6f24eebfbdd60de111e0
- MD5 fad36e282a882a5195700d054e8394cb
- SHA1 d4234a548743802b9ec14a68d41087309179ac4d
- SHA512 510643b7a90660fe43e5a367b7ba45f69298ae19df2da742592f15b3110a813933def8d897ab88c246f27a40d476caeff3407148fa704661fc9719fda9baf791
- SSDEEP 96:NUcaEMXbw+PCzWJMKlYCWcR1TspEuNMXwe8wDFjQUtghDOQTp1QOMFCu3P0dY6tc:NUWSM6YCNRUijbIVp+lPkc
- TLSH
  T1A0E15366D291BC2E543780B8E551ABA9D3E1121267121EF4F5AF7277A34C42287F33DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  email-plain-1.txt
- Size 1KB
- SHA256 b3f29bd61479c0aedd5e84db36c307ace23b818ce1ab4336015663cc56b3038f
- MD5 b24c96b8b29bb01bfc174f96d87c7f92
- SHA1 b45387334215f596e1db3e106973f0460daaa39e
- SHA512 f9edc9a9d0d3d70a92de90184de27c630a347f5afb5ae5d305ab3d34474bd16b6de7d7930de4fa05c5e6fecbd51b8be10054e0d16eab541fdd392024afe9c092
- TLSH
  T1AE31429BFA9726024B2301DB7E5D17924A1284E46B863F7C6898838C2360B55E3B679C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6