General
- Target 2742F0A4-55A1-3E06-A36E-A434B9D45F19.eml
- Size 556KB
- Sample260702-wfz9jsbs3w
- SHA256 2871d40e3ba31af1e243348f748e01c7e69f2706378f3259974b2db6f55df853
- MD5 5fa286917d658dbc59547d24eed94bf0
- SHA1 15c913d6e76da93684759eebecc13b4070014f68
- SHA512 23a7bba834a80944b95142d64d14836a5cf1e1a398e0c4b5fd8ff79d208daba264e1abb331159743479c2d6a9bd730be9c4340453981e43f511c6e108a08cc3c
- SSDEEP 12288:F1mTa+OpKZa+ufPeigf24kETak5vUI0KoGz54hlN2na9X:nmTJuSaxPxgfH2k9xdx43EaR
- TLSH T166C4F12555C41FDA9390562CF0BE3B5D5BF8078F4AA192CD6B27EC093FEFC5806922A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2742F0A4-55A1-3E06-A36E-A434B9D45F19.eml
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2742F0A4-55A1-3E06-A36E-A434B9D45F19.eml
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
Remittance Advise.html
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
Remittance Advise.html
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Behavioral task
behavioral5
Sample
email-html-1.html
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral6
Sample
email-html-1.html
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2742F0A4-55A1-3E06-A36E-A434B9D45F19.eml
- Size 556KB
- SHA256 2871d40e3ba31af1e243348f748e01c7e69f2706378f3259974b2db6f55df853
- MD5 5fa286917d658dbc59547d24eed94bf0
- SHA1 15c913d6e76da93684759eebecc13b4070014f68
- SHA512 23a7bba834a80944b95142d64d14836a5cf1e1a398e0c4b5fd8ff79d208daba264e1abb331159743479c2d6a9bd730be9c4340453981e43f511c6e108a08cc3c
- SSDEEP 12288:F1mTa+OpKZa+ufPeigf24kETak5vUI0KoGz54hlN2na9X:nmTJuSaxPxgfH2k9xdx43EaR
- TLSH T166C4F12555C41FDA9390562CF0BE3B5D5BF8078F4AA192CD6B27EC093FEFC5806922A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Remittance Advise.html
- Size 379KB
- SHA256 abf3d60d52b3bd5096f6782ba6bdc1add07e3f390aee53e04a2ae754d8d58ff0
- MD5 768d8478ae98e305afc3140699af6f06
- SHA1 19f779d3cf52900cab52fd03036dbc9b9ebd1bbd
- SHA512 5dda85c60e7867cd70115b71c9ccb445513a5487178c15d4ea9fcd463b80d5e86b89ab8b7746af49c68198f908bcb31b29a3e61fd10054728aa77042ecc37e23
- SSDEEP 6144:tMS7xXYNiuXG4BZX7CPFvG34j9SzFBq/KTW4Te7AH9Lt3cKmtdkg9tCj+C9KnZKS:2S7xIN04rX70vS4jkq/KTWynLt3cKrg5
- TLSH T1DB842332DE0F090A8758A32077FD16A2AE06A4DBA0B992A5F14D7DD93F7D2305490DBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target email-html-1.txt
- Size 17KB
- SHA256 1371d444b1e09947076930144ad97c7d523c0560228bf77ac040c25d1eca9860
- MD5 cd6a0f84497425a1258ead3cd354b559
- SHA1 35e2e1d6412d3d8de875f21744e323df04ba6159
- SHA512 18a046f56612bef8fb4b4554a385ad7d9f112a37cea330467b05425ff7f8951ec930b068b0c54c53841564f333953313df7df614461317f32043b237ba552b7e
- SSDEEP 384:P+AofP+AVm5l+AVqW+AVM+AVqW+AVdJ5og+AVqW+AVD+AVqW+AVB5qG+ACn+ACqG:W3fWSMcSmShSmSd7olSmSKSmSzq5+5Hf
- TLSH T15182B116E3860F8193670D6472DF2B1C97390ACFAF5285792E9B1955CB8E5BA33C3348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10