General
- Target Estatus Novartis AG - VE
- Size 167KB
- Sample260622-2d5ddagy2q
- SHA256 6fe689a0770353def91bf4b26b7e741986cd78e91cc616c960547236597134fc
- MD5 d93af44ab16788e2eb3f881f56de898d
- SHA1 1bfbbe4f8bfd8b0ae1f405a8a948fbf8860a3769
- SHA512 70657e017a8e7281b59354db75d40d1a77f2655bc613491c7d0512e4d7a64e08755f4357e613c6a088b38b92051cfeca7558d4b640b53e7a7322509b881761a2
- SSDEEP 3072:444tfmkMRfZB0pa2250p0hohpIBdFb68e8jhJURg6udqnjA2+:41tfnO22CpUUIBd48eIUHudsjp+
- TLSH T16FF38E31D6B28E5B04925AAB084277D5BD78B777D3EC80FB20B2B677F466872D708250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
260622 Status NAG.xlsx
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
260622 Status NAG.xlsx
Resource
win11ltsc2024-20260617-en
17 signatures
150 seconds
Behavioral task
behavioral3
Sample
email-html-1.html
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral4
Sample
email-html-1.html
Resource
win11ltsc2024-20260618-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 260622 Status NAG.xlsx
- Size 9KB
- SHA256 48badc277a9607d75da5761e54ffbd92d44515311fbfae183ba50b9390a1ee7d
- MD5 0b28261edff115ebc9d4043bcf4f26a6
- SHA1 b7498678ff755c16e44f7c858135c9943539db0b
- SHA512 bb8e0ff862d95524cbdd7993fd919a36e1f3a593a21c9f0533577daae7117a2fdb303f084e8cc8a6f0d0445c5fba220c058af6dc13b5e498c57bb245a4ba781e
- SSDEEP 192:wc8mVvSb3UpJOn+i40kvWnZ5vpGBfq32M4cN:wc3F23B340EMZ5my3TN
- TLSH T163127D69EA10AE74C3A5047C50AE00D5B6DDB812400AF9BF366474EC72917A3D3BDB4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-1.txt
- Size 8KB
- SHA256 1eb455405fb879b0ba60eed132b8d0fd9d74460b624cc2ebf7e2a655fcb58fbd
- MD5 c07a185024b42330e069cc145d0a8c6c
- SHA1 92f31b4117c32d98f3188e1e80644876d03ed465
- SHA512 53c53a03f9fafe515ff5dc80cbab05f2e492bca17786a5849ede0b436890c2876383f1f40509eafa26e9e40cefcbe28202066282a3d69db2a9e578efee9155b3
- SSDEEP 96:tAJ3JonITB/EucYO0nBTC0a56o0BFbmVwvudnlOKB/Eu7YQ2XQKjrOQKjUQKjoSc:ts5Lq0h06o0X7EM6xGgSkES3nSdSSM
- TLSH T144024307F1C1155A957305B5A023B7BD7AFA5704DF078AB024E1733BEA8ECA262A17D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10