01780a4f3140d10413b12abb293ad5a13227b9ead33b7718f2a9ffa93a818b1a

Sharing

Copy URL Twitter E-mail

General

Target
Fwd_ Disputes tribunal notice of hearing - CIV-2026-044-000531.zip
Size 3.1MB
Sample260709-qvwxsact7v
SHA256 01780a4f3140d10413b12abb293ad5a13227b9ead33b7718f2a9ffa93a818b1a
MD5 da68433c694b3291ab3c7cd6fc4e8464
SHA1 c2b0e842345990cee00ba19307bf8af7c5b4e9b5
SHA512 f114c2d98e13a5b0be73621965a21fc8e2465910deeef6cf281694427afeebd57aa5ca0220240319b1e4bf7c72477dafca04c4ee4363657daa895ea580e36ba1
SSDEEP 98304:3Pwaw5rjzPucprind1Pwaw5rjzPucprinXQTD:3NwtCcZyNwtCcZgQ
TLSH
T109E52311E35C885EDE858521E9AD3A4D27CCF43A3AEF3A45018F5EAC751E8043FA57CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Attachment 6- Letter of Dismissal-d56fb9f577b4c4aa (2).pdf
- Size 1.2MB
- SHA256 2f04e88cbf393514b252bcae46caf46043ac72ae23672b020d0db12f1ddbc91d
- MD5 a9eafa6256433213ce3f61ec78813c23
- SHA1 ca10c22245cbaf7a2aa114c21e38c94f059f09a4
- SHA512 c995fcaf97712a42cacdaaa0b5b65aaaae8adc507d55e8a99c5764606d02ba8991b1d992f64108cf172319a67c219d0f5a7be5d2b7002171dc84e7f4822313ed
- SSDEEP 24576:A8hDFU7whN6wH3iUHZq4s00Lh6hyqz2yk/fMvKYuCFTRprsEuWWpiIP0:AUO7wawXx5r6wzsYuCvprjutpiO0
- TLSH
  T182552342E224D51ECF8A0455FDD61A8D3784A9343DFF3A4E034BB9EC355D8092AE8BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware credential_access
- OS Credential Dumping
  Adversaries may attempt to dump credentials to use it in password cracking.
  credential_access
behavioral1 behavioral10 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9
- Target
  Chat Session - a442b6b9-edff-44d1-a5b8-c9f629c (1) (1).html
- Size 72KB
- SHA256 380b38cf47ab97a36ec1bd690294aa6e44f1c48cda07375550410583832c7371
- MD5 a8f0bfb3885db441150395d294c64a4f
- SHA1 075b1e8091ee60fbcbf2fc2a8d40805e512186ef
- SHA512 3a5840b26c9b4c1736edc74430915af8b873dd2988574514f51a08a5cd6a0b1b47d47e46d0eb2ca1307640be7d54bbcf38a4b8658d81c452cadcd83cb0b2540e
- SSDEEP 1536:kdMozIViKXWZdH47v2oZFWNQmU9WuTUrSybh:k2ozGiKXWLH47p4q97yN
- TLSH
  T1D173A6479329033D0E720A82691D17EF775CE0ECF35612E278DAE278211995247B7EEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral17 behavioral18 behavioral19 behavioral20
- Target
  Defamation and Privacy in Employm-22a6279f9385c4ef (1) (1).pdf
- Size 68KB
- SHA256 3433d776d2d89a4164a65da469b46624e41629b4c2dc38626570bc8d3f79c4c8
- MD5 b535c5ba82bc7b0d002ceff406e483a7
- SHA1 79a0fadbb7988553a1a1d1996be3931bcd64e42e
- SHA512 733b351b8d05f3a35dfc5229439de945e4ae0822e86232bae3d2907baaa426669c113e85d404a5a2cdda8e8af2054d9ea6e1c19902b63bfc7ff4d149672d8704
- SSDEEP 1536:OT8Y4LhAG/BBwX9y3gMGC1N5HGdjlHwhuom2oOfpMYhFcTjQhk4CNQ5X:3Yk2NywMzJmd9wcomVMMY7WQhkfoX
- TLSH
  T12763BE74F8DE4C9DF80AC608C2BE750A4F1EB52BB2CD348500AD0B15E0059E5EBA66DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence ransomware credential_access
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- OS Credential Dumping
  Adversaries may attempt to dump credentials to use it in password cracking.
  credential_access
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22 behavioral23 behavioral24 behavioral25 behavioral26 behavioral27 behavioral28 behavioral29 behavioral30
- Target
  Formal Disciplinary Hearing-59772d23ba1c0518 (1) (1).pdf
- Size 41KB
- SHA256 8afd05291314a82534132457cb22fecee40f7ae0706cf5c19e4ce97bc64a515b
- MD5 f401aff85a160f17b03a68186ef41f15
- SHA1 5b5fdf4bb6cc6aacb085784c9ec102f72ed7d467
- SHA512 29f296e54bd8203d061914f24dd68a5ae06a4ca77aa7dd18ef113ce3f88c0142ef1cb6364467f746985e65302caa802da6eb9aaa97fabcada725e8e86c67124e
- SSDEEP 768:aX0O5YLtijt+eoG/P1EZqZdSuSd3HnxcXruAwcJ843sL:q0NAt+eJPsJuSxHxcXrV3sL
- TLSH
  T1C413C066D9DA1CDCF8D7DB525234786D843E721357C87C82717C0B8AAC14A88AB718EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

OS Credential Dumping

T1003

/etc/passwd and /etc/shadow

T1003.008

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

OS Credential Dumping

Boot or Logon Autostart Execution: Active Setup

OS Credential Dumping

Enumerates connected drives

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32