General
- Target phish_alert_sp2_2.0.0.0 (1).eml
- Size 137KB
- Sample260708-pxtprsfx6t
- SHA256 98ff9122fb2b9c6a9857a077a584fdcbbc10e1982cb8e2d3c6a5c8cb3069856f
- MD5 2035858a3e414045699d36ca2906bfe5
- SHA1 cc1db53cc748333d4ae7ab123cd513613021fc4a
- SHA512 bdaff39b557ce6ab6e1633d4eb7c6e6a89c8dfd8b08f303534b9d2cb24d4c804a168bac9a07e102899c4691cc508becfbdc008411203d9b9ea4cee2da06d760d
- SSDEEP 3072:AXBrqemz0ndo96SMvepwKwVHoc7ldVjZ0Re/NqTdevGIfupBvDe:AXBrdmKo8SuD2w7y4/QEvGIfu/q
- TLSH T146D3F11674927C7F830A8EB77759881969F024DF038B9C20D2F8B7952E902D9AF7CE51
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
phish_alert_sp2_2.0.0.0 (1).eml
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
phish_alert_sp2_2.0.0.0 (1).eml
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
0090_260707175255_001.pdf
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
0090_260707175255_001.pdf
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target phish_alert_sp2_2.0.0.0 (1).eml
- Size 137KB
- SHA256 98ff9122fb2b9c6a9857a077a584fdcbbc10e1982cb8e2d3c6a5c8cb3069856f
- MD5 2035858a3e414045699d36ca2906bfe5
- SHA1 cc1db53cc748333d4ae7ab123cd513613021fc4a
- SHA512 bdaff39b557ce6ab6e1633d4eb7c6e6a89c8dfd8b08f303534b9d2cb24d4c804a168bac9a07e102899c4691cc508becfbdc008411203d9b9ea4cee2da06d760d
- SSDEEP 3072:AXBrqemz0ndo96SMvepwKwVHoc7ldVjZ0Re/NqTdevGIfupBvDe:AXBrdmKo8SuD2w7y4/QEvGIfu/q
- TLSH T146D3F11674927C7F830A8EB77759881969F024DF038B9C20D2F8B7952E902D9AF7CE51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target 0090_260707175255_001.pdf
- Size 96KB
- SHA256 6c9b88d1366151db07455fa240f1af6e205e43390b12d047851ecbc480d88cac
- MD5 d2fa96059e3668ce267b4c29c083e843
- SHA1 7d54114c541ecc5ae200dedbde34cd11119c3a04
- SHA512 565dbd761a1ccd860c785b300546e38500dbabb5420438356f77ddd1121c8f17d982efb5f6543247acfcb5cfdf139f5c92ff98defa43733caa58ac1afa717875
- SSDEEP 3072:Gd+8/Qb6vM2/QCbMxspudKbWmdb74IAC18X:zzEp/QCbkEKYF1a
- TLSH T1E3A3F113A04BC56FDD5F861249CE7BCDAB073D9492D83072E4BBF99EDAB1162B421089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.