General
- Target Zu0jCE9RpeHnR_OYzpaqiqs9e36bWUNa_2026-07-08T07_10_44.464Z.eml
- Size 102KB
- Sample260708-h2adcsds7l
- SHA256 35acb3e73ae48cffd82412bf07ce8d045c0b2566e9fc131c7e4231dacf6008e8
Score
8/10
Malware Config
Targets
-
- Target Zu0jCE9RpeHnR_OYzpaqiqs9e36bWUNa_2026-07-08T07_10_44.464Z.eml
- Size 102KB
- SHA256 35acb3e73ae48cffd82412bf07ce8d045c0b2566e9fc131c7e4231dacf6008e8
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
A potential corporate email address has been identified in the URL: [email protected]
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-2.txt
- Size 5KB
- SHA256 fea78c763ec36df5c435b0ddcad093e809dc580700fbe65a543c6d4f2d9c49eb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-plain-1.txt
- Size 174B
- SHA256 8f5ed4d8767bfd14fcb2b83918f61921d9c75fcd823147ce2ef0bf27637335b1
Score1/10 -
- Target oursb proposal.pdf
- Size 56KB
- SHA256 8adb7d0e75e4aadf8a215fdcf0f78b3027c95281ab00e65faafb6dcccfa5cb26
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.