General
- Target c95e4500-93b5-eac1-6542-949955ba3f4f.eml
- Size 20KB
- Sample260711-ggstjaew7w
- SHA256 34fbbe0c82f0ce25fa00fa060d3b7dad9b4b24dbb71f0408f45468a3294244a7
- MD5 c20096c3597207d318aa838ae5bd93cc
- SHA1 94f4dab180e1daf913cef5994847b32b27215c0f
- SHA512 1ee1c2adce664b12b07cb8a9fa4e76fd5433471333d8cda68c9a9e017432282f263d68a516d05c9602e985ca90ad62658540ae199cf3b4902db9e88f4419b65c
- SSDEEP 384:SgDEe6eHMZcOpdVDpFI/Gpaa8PW5CCcGrBfoj27OMrg6rF5rljbQPqbq:w41OLBdQujcusYq
- TLSH T129A23B546E43100AD63642C9AC216D989350BE4DE2FB3491B82B65779ECF1FF5E28E4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
c95e4500-93b5-eac1-6542-949955ba3f4f.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
c95e4500-93b5-eac1-6542-949955ba3f4f.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
email-html-2.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
email-html-2.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
email-plain-1.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target c95e4500-93b5-eac1-6542-949955ba3f4f.eml
- Size 20KB
- SHA256 34fbbe0c82f0ce25fa00fa060d3b7dad9b4b24dbb71f0408f45468a3294244a7
- MD5 c20096c3597207d318aa838ae5bd93cc
- SHA1 94f4dab180e1daf913cef5994847b32b27215c0f
- SHA512 1ee1c2adce664b12b07cb8a9fa4e76fd5433471333d8cda68c9a9e017432282f263d68a516d05c9602e985ca90ad62658540ae199cf3b4902db9e88f4419b65c
- SSDEEP 384:SgDEe6eHMZcOpdVDpFI/Gpaa8PW5CCcGrBfoj27OMrg6rF5rljbQPqbq:w41OLBdQujcusYq
- TLSH T129A23B546E43100AD63642C9AC216D989350BE4DE2FB3491B82B65779ECF1FF5E28E4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-2.txt
- Size 8KB
- SHA256 e5787d17fa7ca3d77f17393322b444bd7142ca967582b05ec190bc8f6b54d8f0
- MD5 2588fd98bd5daed2490e9b64ec0e548f
- SHA1 87974c2f2b314e4c9bc745465e3da44fedc0f6d7
- SHA512 23d5b8a86a0a6ee532e6dabfac01ba161d6076913e09f8e4b6bde6676d526cdb7180437e83256e092943549aa61bb482375e37dd562fc989d4e995f4fe03bb33
- SSDEEP 192:vRRB+32xFdrAteHc+32kmggsQTnsXKeFVMTMP:pPK2xDcK2kmggsQT+MTMP
- TLSH T1EC026551AB80301D542F41EAF9A2FAFCD240014F53DA38D1F91A9133EE9B0F79925B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target email-plain-1.txt
- Size 853B
- SHA256 5c41cdf20480ae95bff3b6ec15f491ed44a83e99f988cde9cc10701e78dff022
- MD5 8468337016511ed647f2abbcc68b7ffc
- SHA1 c1c2a8f092dea088fa5e6fc43b56ea0f72e6aaf0
- SHA512 285059f78c07d83faa8b35d601ae5d9f839800e6e8fc9bb47bbf2a7cfde54ebcbee4b21411a948ce098094365f5290d293b93bd15af54c29078606c67ec4cbf9
- TLSH T12301817E2D87B4813334E3E418C06CA8C80A43BBC6880A4376DA0358A2792CE949CD4D
- MD5 SHA1 SHA512 TLSH
Score1/10