Overview

overview

8

Static

static

1

cccf5041-6...89.eml

windows10-2004-x64

7

cccf5041-6...89.eml

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    QuarantineMessage (3).zip
  • Size 14KB
  • Sample260623-ldevqabz5w
  • SHA256 0dde5985ad86326bcb6133ebf42148cc6f73f2893132c011f65c10c9d3bde4a3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistencephishingransomwarespyware

Malware Config

Targets

    • Target
      cccf5041-657d-42f3-c2eb-08ded06e3eb3/fa789c2f-f44e-9a95-f8ac-01d5714bf889.eml
    • Size 54KB
    • SHA256 ac8b4092937f9f48ec26703028d343c7fcd42d251a68da0f6734ce62228e3763
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarediscoveryphishingspywarepersistenceransomware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • A potential corporate email address has been identified in the URL: [email protected]

      phishing

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks