General
- Target Review Your Form.eml
- Size 5KB
- Sample260706-shseyagy6t
- SHA256 d8554c617358a3a0f0219a0d88d8c3ce8630f972b5270dfe8684a58c96c72256
- MD5 905f6cb0bde83720c35a564e31dc2d05
- SHA1 8b379a726ecc03cd77a66fbe4999200d9e0b3483
- SHA512 223cec8e1a7a95ef33790b1ededbe620449848ea2b722d6d1f61235480752657acff46a52d15781fe667a4b50df44bfb9435f235459fd9fdbb615e0cb8b71430
- SSDEEP 96:tnubtVgeDI33f0YLMrHvM0n4/ztKp2sCk2acGR9hUMqx5/or7UBNWDZ5:tnucZ3vNMrv7IztHacGHI5/g4ML
- TLSH T1FDB1F9D951825CB968334075F161A98EF3B4621C73611BF2E477797BAD84C002ABB3AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Review Your Form.eml
Resource
win10v2004-20260513-en
16 signatures
300 seconds
Behavioral task
behavioral2
Sample
Review Your Form.eml
Resource
win11ltsc2024-20260630-en
17 signatures
300 seconds
Behavioral task
behavioral3
Sample
email-html-1.txt
Resource
win10v2004-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
email-html-1.txt
Resource
win11ltsc2024-20260629-en
0 signatures
300 seconds
Malware Config
Targets
-
- Target Review Your Form.eml
- Size 5KB
- SHA256 d8554c617358a3a0f0219a0d88d8c3ce8630f972b5270dfe8684a58c96c72256
- MD5 905f6cb0bde83720c35a564e31dc2d05
- SHA1 8b379a726ecc03cd77a66fbe4999200d9e0b3483
- SHA512 223cec8e1a7a95ef33790b1ededbe620449848ea2b722d6d1f61235480752657acff46a52d15781fe667a4b50df44bfb9435f235459fd9fdbb615e0cb8b71430
- SSDEEP 96:tnubtVgeDI33f0YLMrHvM0n4/ztKp2sCk2acGR9hUMqx5/or7UBNWDZ5:tnucZ3vNMrv7IztHacGHI5/g4ML
- TLSH T1FDB1F9D951825CB968334075F161A98EF3B4621C73611BF2E477797BAD84C002ABB3AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target email-html-1.txt
- Size 3KB
- SHA256 8cbf1c20cf1cd5e1c304f77d4c24b5b5f43c9415f32e011e87dc7cb9f15e099d
- MD5 938e63741e3afcef257aba568e839170
- SHA1 97c88acf02f6914fafda561aaa8726eded1db03f
- SHA512 74d7c68765f9a64942391a8424d3d0732946547e09c73a09f62410c0f08dc00058e030b3ea62cba3de2325bd4edf2ec0da43954bba20463c4da0f35f14ce9c57
- TLSH T12E7143A992816CEA68374039F1619DC9E3A4A60CB3111BF1F476783BFD85C00667B3DE
- MD5 SHA1 SHA512 TLSH
Score1/10