d26bf5375fbb8777912eb7f10f55c8aeadcef82086787fb0a2f20d23a81dd9e9

General

Target
dac0ef92-9b19-bb99-ba05-2bc41cf474d5.eml
Size 33KB
Sample260727-rtgl5svcke
SHA256 d26bf5375fbb8777912eb7f10f55c8aeadcef82086787fb0a2f20d23a81dd9e9
MD5 b80eb4d6c67076d1ce0a9a19ad867c28
SHA1 f9132b0828194dd45677f34ce2d80132ac30704d
SHA512 17c91a513cfcf52da062c5f2f3f82b5efcf44e1809b2628cbb354c094807ac209d82566b117b4881a6ff1396672bfebd68906532ad18b4319fe623e34495e035
SSDEEP 384:RAMbXwXic1zhhbGwtZTn5Jx4tD4PB4G3vW+gmo3LbERJsWO910sdwWVu4r+ELNRh:RAMTwSc1Fh3td9Fq6egefGhA
TLSH
T155E22A7683535C17D872003590223D96A2205F0EA75749A0B85B173FEE8AF271F6BBED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  dac0ef92-9b19-bb99-ba05-2bc41cf474d5.eml
- Size 33KB
- SHA256 d26bf5375fbb8777912eb7f10f55c8aeadcef82086787fb0a2f20d23a81dd9e9
- MD5 b80eb4d6c67076d1ce0a9a19ad867c28
- SHA1 f9132b0828194dd45677f34ce2d80132ac30704d
- SHA512 17c91a513cfcf52da062c5f2f3f82b5efcf44e1809b2628cbb354c094807ac209d82566b117b4881a6ff1396672bfebd68906532ad18b4319fe623e34495e035
- SSDEEP 384:RAMbXwXic1zhhbGwtZTn5Jx4tD4PB4G3vW+gmo3LbERJsWO910sdwWVu4r+ELNRh:RAMTwSc1Fh3td9Fq6egefGhA
- TLSH
  T155E22A7683535C17D872003590223D96A2205F0EA75749A0B85B173FEE8AF271F6BBED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  email-html-2.txt
- Size 15KB
- SHA256 03d6434d74e5f205bc04af913d19ea4bde8982329b464651e710b41cf04aa25e
- MD5 96ec47d94a58dcc4406c94b15b9070dd
- SHA1 c7c6b5b8bc00d8279e8eb391a78fa1c2108b881c
- SHA512 56c6524bdfcbfac0ba9517cbffe13a3774957afd04e0dfd73cac685c77375fa61d17febc371ec8351635aecfd2f21da8806e6a18d3acd2b454f66737e539fc10
- SSDEEP 192:sOhO7nCs4NyKmjLpyzt2iQrSpWZD4gKIJgZI3MhiwnsUwaaWQwqDEXxk:sBeYTT2pGPRJfUbsovUDEBk
- TLSH
  T16D627273C7917C2AC4328074E122BEE6B150030B5B461A60F55A973BF64AE734E6B6FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  email-plain-1.txt
- Size 5KB
- SHA256 d358150667791c7f7d9d27784c6d9a6728eb378877d2f939aa8430e54feb33bb
- MD5 66ed4f79abb43a34e0570e43a5c580a6
- SHA1 3138c2c2d0100df8139426b11ddbe87ffa98fe0e
- SHA512 4971d8488e6425354f382ec97d170d662ca9270619d3e627aaf1b7a54b6e025c42d57c69de9bf729b387150ccf05b7da12b0b664c613eb380c43991e414e5d39
- SSDEEP 96:ge1EtGnqGlQhK3EcpIXqczsdJ7sozgu26JNq4n9qqIqW+AYqjILqR+y:FatGn7lQhGpIXHAx7JNfn9PIPNYdL0
- TLSH
  T16BC196BE83BB2122E633112151223ECFD6254A0779C61910744E0F9D3757F218ABFBAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6