General
- Target Message.eml
- Size 24KB
- Sample260625-phdd8sby5k
- SHA256 9af364f4a003c98b0ed3a0847fb64e79716ba5bfe5f6007e9c19dfcc5e7ef355
- MD5 17d5c8438cb16e604ee334808f3d2645
- SHA1 abe153f4218905b1453862e10bb4bfbffc2054d1
- SHA512 a7b1b0c8acd11b317004870e6f7b2299065fbbece090ab74f30ee587d1f58b1cb7b7cffc8573f9537026fa5c9c81a16e6d1a8f132def0661f3defe111bb5101c
- SSDEEP 384:X6wCoqSn97UGn2Ppyb8Y2JwKOz61To/kLUKAIwypTDX8Vvo:K297UG2/Y2JwRz61To/8UKbwypN
- TLSH T158B27043F3C00802CEAB496069433B3D7B79A8C69B364C74699B3F7E078DCE79A95645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Message.eml
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
Message.eml
Resource
win11ltsc2024-20260617-en
17 signatures
900 seconds
Behavioral task
behavioral3
Sample
email-html-1.html
Resource
win10v2004-20260513-en
11 signatures
900 seconds
Behavioral task
behavioral4
Sample
email-html-1.html
Resource
win11ltsc2024-20260617-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target Message.eml
- Size 24KB
- SHA256 9af364f4a003c98b0ed3a0847fb64e79716ba5bfe5f6007e9c19dfcc5e7ef355
- MD5 17d5c8438cb16e604ee334808f3d2645
- SHA1 abe153f4218905b1453862e10bb4bfbffc2054d1
- SHA512 a7b1b0c8acd11b317004870e6f7b2299065fbbece090ab74f30ee587d1f58b1cb7b7cffc8573f9537026fa5c9c81a16e6d1a8f132def0661f3defe111bb5101c
- SSDEEP 384:X6wCoqSn97UGn2Ppyb8Y2JwKOz61To/kLUKAIwypTDX8Vvo:K297UG2/Y2JwRz61To/8UKbwypN
- TLSH T158B27043F3C00802CEAB496069433B3D7B79A8C69B364C74699B3F7E078DCE79A95645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-1.txt
- Size 14KB
- SHA256 87711c03a1f998923573547925793d322df6b20248426ab346b55b2dfebcf34d
- MD5 8e2a43706207c3be857f259ca58979d5
- SHA1 2650f6e69c8af89c21614feedd60d0a60623ef43
- SHA512 c5c96a04e7395c983b569e5cd29821f4b13b4d76777c931be9773d1fc740ea9252d56385c1221bd23d176f9faefa0aaf962c95a27b93f3592182ab776d457392
- SSDEEP 192:C26bCKHYDN5zSY8H2o1DVkuoU4/G02NRnIwydbTDX8Vjbo:Cz61To/kLUKAIwypTDX8Vvo
- TLSH T100522A57F6C01911C9AF8A20A543377D7F3989DA8F224D34A89B7B7E0B4CCE386C5249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10