General
- Target Message.eml
- Size 21KB
- Sample260622-rw2p4ac14l
- SHA256 8fa22dfec55cacca76d623578b4223f97601e17cb630b4d1aaecbdbf4abd8e53
- MD5 9ce3874f72bf7549148674714cdeec7b
- SHA1 20ff0bb9e57a7c50ec539e18fe2dff1ccb5faa95
- SHA512 4d3f8dc996a4f164b77732b11278ccf49eb3f5c6679bd3a7c2c3ebbdef6b703a4b92530e9fc11e3ccfbd6f23d2592cfb90c92344db7ff9b7acd7a9e5395ea06f
- SSDEEP 384:Ze7I4lt4hBTqLOL3iJO4zsb2PmLCb/nEtbl9X9g:OIBT5ytzsaSo/Etbl9X9g
- TLSH T13CA2F826737E9A8845F7E67B890CCFC35174D58A5893316AC7E7028897022D21F8E5EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Message.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Message.eml
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
attachment-1.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
attachment-1.eml
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
email-html-1.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
email-html-1.html
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target Message.eml
- Size 21KB
- SHA256 8fa22dfec55cacca76d623578b4223f97601e17cb630b4d1aaecbdbf4abd8e53
- MD5 9ce3874f72bf7549148674714cdeec7b
- SHA1 20ff0bb9e57a7c50ec539e18fe2dff1ccb5faa95
- SHA512 4d3f8dc996a4f164b77732b11278ccf49eb3f5c6679bd3a7c2c3ebbdef6b703a4b92530e9fc11e3ccfbd6f23d2592cfb90c92344db7ff9b7acd7a9e5395ea06f
- SSDEEP 384:Ze7I4lt4hBTqLOL3iJO4zsb2PmLCb/nEtbl9X9g:OIBT5ytzsaSo/Etbl9X9g
- TLSH T13CA2F826737E9A8845F7E67B890CCFC35174D58A5893316AC7E7028897022D21F8E5EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target attachment-1
- Size 9KB
- SHA256 1bc042ffbabe8e5fe652641b13552751699a26a1f19eb5b10a8fd22fdba488ce
- MD5 bce4b4cab3be0bd670685866d2f1cb69
- SHA1 3fbe5eb2af8a57cbcec93e814244e777e91424e6
- SHA512 883caed6c8332e2ce9fb4e29dce3ff47854972332995b662dcf562b0cc5450ae7635a5da7310d46d3fc2862e73943df55108ceb61f81da6e9dc7a7c00f302102
- SSDEEP 192:+J9CnfaxJT+s8sFu664V0vugggggggggggH2beazioggggggggg49Ag26wJ//gVY:q9CCDas8sFu664ynE9dRwt/gVvX34B7f
- TLSH T1B8126526C6B0453E44BAFBB4F014EB3D52D25F0D826CA454B4E528BF8D2B641DAEB30D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target email-html-1.txt
- Size 9KB
- SHA256 8590a8740ea4b7345e730326487081380d73a5e9118438664558a066b9c6af2c
- MD5 919b87fc615f7919ff6622ac89024da2
- SHA1 8a2c797582adc7409735ea7658cb6305754fafe5
- SHA512 978448e591eba121e0f312ddad7d463a5f5c3dba670026dc13d18aae41c10ca0f7108bea84d00135bf4da55eee897b672ab76c4fafd9fdff97b8c5c08b62dc30
- SSDEEP 192:xCnfaxJT+s8sFu664V0vugggggggggggH2beazioggggggggg49Ag26wJ//gVcKg:xCCDas8sFu664ynE9dRwt/gVvX34B7bT
- TLSH T113124426C5B0443E44BAFBB4F014EB7D52E25F0D826CA444B4E528BF8D2B641DAEB30D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10