Overview

overview

8

Static

static

1

a62dc3ff-b...02.eml

windows10-2004-x64

4

a62dc3ff-b...02.eml

windows11-ltsc_2024-x64

8

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    a62dc3ff-b9f4-7c9f-02d0-f8e1e30c4902.eml
  • Size 13KB
  • Sample260702-klghvaex8x
  • SHA256 bd389a791fa43bd7bc007e7bf405e840990e1348defb59fe1fb08380aa6336e3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceransomwarespyware

Malware Config

Targets

    • Target
      a62dc3ff-b9f4-7c9f-02d0-f8e1e30c4902.eml
    • Size 13KB
    • SHA256 bd389a791fa43bd7bc007e7bf405e840990e1348defb59fe1fb08380aa6336e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarediscoveryspywarepersistenceransomware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2
    • Target
      email-html-1.txt
    • Size 3KB
    • SHA256 b99a044015c23ef0f4591c73c7e9cb75c2b2e7b54a2d011121b775466b5a0130
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks