General
- Target 50f1af96-4c72-b144-595c-8768025d700f.eml
- Size 15.8MB
- Sample260709-b4d11act5v
- SHA256 6ae463315e69a5f41a77eec4ad364990f89a5c42ee450b7724c89c689d42a7f3
- MD5 1de6eee777333efa9f5b96fa143ae517
- SHA1 5cc43827e8027dbbc537a43186379b8f1575067f
- SHA512 e39e5de38fa462f6048a060f03f9f6991fc6a08878119a751da81256227a5cb14a0038e3daee58ebb2d71e91560eb13bd2d2679fd6e6f01905735f5286f4e8da
- SSDEEP 49152:AgdrTt36qfOcezH9EvFVFtWmEdKYSIdeA78rHdWMkfIrjGSVz1lz2US8ILb5zUV8:a
- TLSH T146F62338998926DF0911E2FAF216B89471DD63CB0C83075743BCC6F535FA4A49B63CA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Prophix Conso Excel Add-in Installation Guide.pdf
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Prophix Conso Excel Add-in Installation Guide.pdf
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Behavioral task
behavioral3
Sample
Prophix.FinancialConsolidation.Setup.Exe.ExcelAddin-25.1.1.0+d7211bd.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
Prophix.FinancialConsolidation.Setup.Exe.ExcelAddin-25.1.1.0+d7211bd.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Prophix Conso Excel Add-in Installation Guide.pdf
- Size 1.6MB
- SHA256 33c7d9f43cb9fd175c3a2cdc3ab22141146980a9d4d33596ea33ad13313d8590
- MD5 009ebb51bcfb880f92f5b4f80252f75e
- SHA1 a88420f7435358dd83be8c60eb8ac8175fc4ac63
- SHA512 918f72818f1e4efb8e256c27f45404ea6cac4717017e66a8738e18733142cc822c068dca6647440e8740c76cf0486cbd4e4c4b2fbad83009cf5fc80c7d3cc736
- SSDEEP 49152:0+e2DDKoObqAkG8aImxVuHSshWpuPJVvwN6q:0lrVr7fxVuHS8NPrDq
- TLSH T1327512074855DBCAE22442F53F072D0EB71B3E15B1C521E9316EBE9F6B32D268E8644E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Prophix.FinancialConsolidation.Setup.Exe.ExcelAddin-25.1.1.0+d7211bd.exe
- Size 10.3MB
- SHA256 f8dc49541be0db8d563af5925ce08b48b1f8c32815c634e8d3cc75506be02896
- MD5 c9c86a847702e594c1e4d88bf1a20a65
- SHA1 9581fe724121b94f87cac5817fe5688bf2b3a5ab
- SHA512 ebe6e6945ae25be5428d5cf975642c15689d6745175121e862adfb2b86e55c0a36834d8d45f2487723165d39013c75831f2d5446a98808af9c88bc7179b0417f
- SSDEEP 196608:vT9yzVPrw9n02ha5SVRkGKEkJkDQXPHJ9rp9xd8NV6nn6Yq/jeNo/vqGn:7IZjxYVRkL7kM/Hjrp9xHnn6Yqiu/n
- TLSH T1DAB633F263604022F1F509F36978DD312D3EA724E7118AB5D2D0BC5C7AB44A66BB7263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10