3e704261f453401f542c6376c2565d842bc9bb4ad98963aba4b8a4cb8a173ab1

General

Target
69f69e3e-2f5e-1e74-2bcc-7b0c98a037dc.eml
Size 15KB
Sample260702-ngxaaagy8y
SHA256 3e704261f453401f542c6376c2565d842bc9bb4ad98963aba4b8a4cb8a173ab1
MD5 8ba98a14959a2ba429be5ab48e4e716c
SHA1 09fc93fea831a89aa66d54e3ab9a9edf0a193dc9
SHA512 84ff5f7377768663aa0e73e9b106f8a23619858e6e2ca8a2bd3c63a8cba2520dc048b9af1b43b41f78b0b112713ceafadd02773813dbaf443d81cdc4b5ec0f13
SSDEEP 384:DX7H7tt8019CbWH0NsM1jva9szISHGfEjwDGK:DX7H7t7C68sM1jv5kyH0v
TLSH
T182623C3009414D16EA3095A668906E484267FD48EC3F5494BA97277F9BCE43F2F1FDA8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  69f69e3e-2f5e-1e74-2bcc-7b0c98a037dc.eml
- Size 15KB
- SHA256 3e704261f453401f542c6376c2565d842bc9bb4ad98963aba4b8a4cb8a173ab1
- MD5 8ba98a14959a2ba429be5ab48e4e716c
- SHA1 09fc93fea831a89aa66d54e3ab9a9edf0a193dc9
- SHA512 84ff5f7377768663aa0e73e9b106f8a23619858e6e2ca8a2bd3c63a8cba2520dc048b9af1b43b41f78b0b112713ceafadd02773813dbaf443d81cdc4b5ec0f13
- SSDEEP 384:DX7H7tt8019CbWH0NsM1jva9szISHGfEjwDGK:DX7H7t7C68sM1jv5kyH0v
- TLSH
  T182623C3009414D16EA3095A668906E484267FD48EC3F5494BA97277F9BCE43F2F1FDA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware phishing spyware
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
behavioral1 behavioral2
- Target
  email-html-2.txt
- Size 3KB
- SHA256 4b21bec87995bf793201c55b61d8ff3ed570662e217eb9ef65a7167d9307965c
- MD5 ce4a55031d1264af021677573c63b871
- SHA1 8a16ef695a2b34e80b09fef2adfd7fcfbffe0d8d
- SHA512 26901d3445105faa6a79bf7735a4423c4815d9c4b11463a41e5fa4a80f470602aad5a22beb0ee346c9baf8cc2b019181cd389412c985c38dcc34274bafd9862d
- TLSH
  T161711A724C842E427538A079E1609FDD8967212C7E5017C8F5D20B2BD3895039BA73FC
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
behavioral3 behavioral4
- Target
  email-plain-1.txt
- Size 1KB
- SHA256 6927f1b576df18b38691a2f84a153dba2dc8fe4d4e8852d0f6920abc892b23db
- MD5 3f3b52c2c59bb6da9d3cf8194d1e13b8
- SHA1 7170109ad60fedd70b6bbba4f4812852aeea3c86
- SHA512 5e8fd8e9deabd5639a4cd8dcc5678ad9e0caccb9944978d5d10d1e84a7f9f9963940402d64cd0a651b0eb81cb8d010d6bdc192e9cd66a8d71a864416bd55b245
- TLSH
  T12D41E8B64C9E59D07235200739904F0F487FA01C4C94625CDAE2472D83AAF17EB99FCC
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6