General

  • Target
    Estatus Novartis AG - VE
  • Size 167KB
  • Sample260622-2d5ddagy2q
  • SHA256 6fe689a0770353def91bf4b26b7e741986cd78e91cc616c960547236597134fc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      260622 Status NAG.xlsx
    • Size 9KB
    • SHA256 48badc277a9607d75da5761e54ffbd92d44515311fbfae183ba50b9390a1ee7d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      email-html-1.txt
    • Size 8KB
    • SHA256 1eb455405fb879b0ba60eed132b8d0fd9d74460b624cc2ebf7e2a655fcb58fbd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10

MITRE ATT&CK Enterprise v16

Tasks