Overview
overview
8Static
static
1phish_aler...1).eml
windows10-2004-x64
1phish_aler...1).eml
windows11-ltsc_2024-x64
8Outlook-tsgouf0b
windows10-2004-x64
1Outlook-tsgouf0b
windows11-ltsc_2024-x64
8email-html-2.html
windows10-2004-x64
3email-html-2.html
windows11-ltsc_2024-x64
4email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
8General
- Target phish_alert_sp2_2.0.0.0 (1).eml
- Size 1.1MB
- Sample260709-cegw2abw6p
- SHA256 7828e02b5b137507aa0beb032c2309c84fa9bfcfd61af89b11be6b8fbf3e391f
- MD5 37cec232666e507cffa919e3a0121daf
- SHA1 5ecddde1b7d9d189558bf7b6fd80308f16b3fdea
- SHA512 ff14882b356afda03b4e6d573142debf94254576b87c471f9ffb35e7c02f1520fb10a74f6418eb58de90223eae4121ccf0437a8fd0749edca1c032bd8597a51c
- SSDEEP 24576:HXpr2UIZvsTOlnIhQZAgMBlNlsC+vRLa7dH26Cf14/LD:l+Zvs6BKNkvRcPCf1a
- TLSH T14245232CD9D41AEF8D42FAFFF015B4D4919D218298C21B5502FD47B210FFCA8DA3A959
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
phish_alert_sp2_2.0.0.0 (1).eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
phish_alert_sp2_2.0.0.0 (1).eml
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
Outlook-tsgouf0b
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Outlook-tsgouf0b
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
email-html-2.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
email-html-2.html
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
email-plain-1.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target phish_alert_sp2_2.0.0.0 (1).eml
- Size 1.1MB
- SHA256 7828e02b5b137507aa0beb032c2309c84fa9bfcfd61af89b11be6b8fbf3e391f
- MD5 37cec232666e507cffa919e3a0121daf
- SHA1 5ecddde1b7d9d189558bf7b6fd80308f16b3fdea
- SHA512 ff14882b356afda03b4e6d573142debf94254576b87c471f9ffb35e7c02f1520fb10a74f6418eb58de90223eae4121ccf0437a8fd0749edca1c032bd8597a51c
- SSDEEP 24576:HXpr2UIZvsTOlnIhQZAgMBlNlsC+vRLa7dH26Cf14/LD:l+Zvs6BKNkvRcPCf1a
- TLSH T14245232CD9D41AEF8D42FAFFF015B4D4919D218298C21B5502FD47B210FFCA8DA3A959
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Outlook-tsgouf0b
- Size 8KB
- SHA256 aba189b53718f6648bf62a80490336db9182324edce51c211da93b91f473ffe8
- MD5 e76af664ed85af729247ce3a5cf7d5cb
- SHA1 4edf95898fe24186606bff1b6851b34dbf5092b7
- SHA512 2ceef0307e3aeb39ebb0da70722ef020de8479e9246750b6a981d3d2eeaaae6d9bfd3d67b6018670a218ffc591c71c6506b4394377832bd11e189f30969b95c8
- SSDEEP 192:EJhklc22rDhkGQkNimRhxtIRi57/Mgy/MtLP8gAschiumB9pGOR0lQf9:EJlhlQkNimG8/MgykdP8gA+DwORsQf9
- TLSH T18712AF58851AE1C8B8F709B042DEAA4C476B34740973AA385602FB8229F97FA3D1846D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-2.txt
- Size 6KB
- SHA256 57ff6098c9167666be725e0345181d0b677b6de8daa490e19b260c4a25767632
- MD5 ba6086e98aada55385168b81b5a80551
- SHA1 156c3b7f54ce75154e65451d2d149835a4ab645f
- SHA512 031802b56a477d375c46c3fc9da763e91710bc48cd27ddca8b2876cb669db2012ceddc30928255d629e975f721a719ddfd3029fedc0aff0b612126f345a8743d
- SSDEEP 96:CPA0t10E5Az9fo9Zw9P9L6U/bu9y9jZPuM9nAA9jiyis:gA0tN2HApyr
- TLSH T13ED1BC47F245260A51D39E3CF123F7DA9E8EA248221F68A121716397DDDFC3192E3388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target email-plain-1.txt
- Size 599B
- SHA256 b8df69b5d8d92b68fdee563949cffe239cb25f4f750f1e952820485f0400ccb9
- MD5 7b39a426ec76ca87c34c35c85e3b9983
- SHA1 2dfcd31e4ad5a32ba95b24efb6d9b0e2c9a1cc14
- SHA512 b28ff970056e7b5dc6fea029b59adbce03ed8ce74c5c73233fa33d26712180ee4730d6e4d20a114dec61397af500ed5b4c8844be09c6ebfde0208bb6cd45c44a
- TLSH T15AF047FD600BD34143069CA230925F57C565397DC9851FD0300A07E84B897B237F075C
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.