9fc9fb1c2eccf6bfed7e4307f91081540a31e0022e1bacab1d353389ca00ea57

General

Target
newem.eml
Size 33KB
Sample260728-lycwvstfma
SHA256 9fc9fb1c2eccf6bfed7e4307f91081540a31e0022e1bacab1d353389ca00ea57
MD5 98acca97bcc1c198f2c328733f1fc862
SHA1 9648acaee351e08daf2e4513c7e21107779b3f63
SHA512 e56860be23dd5a8169d0f8236258c85ef56ff84ab49983d52f49b865273fef491491eaa4ef1f17b32ab14b8a47357d023ebcddf737b761c8d7af711334997318
SSDEEP 768:NVJmHGpjD1EmPOvdPr2V76EC9RPr1CXaPopIq73YC0tYzY2Y1YRY2YLYmRYbYmYq:H6Gx1POlPr2V76E+PruaPopIq73YC0t4
TLSH
T19DE2557F46830D51F22054B060616B9C1453DB1F92FB386D2EA6BF6BA85C12D3D0DFA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  newem.eml
- Size 33KB
- SHA256 9fc9fb1c2eccf6bfed7e4307f91081540a31e0022e1bacab1d353389ca00ea57
- MD5 98acca97bcc1c198f2c328733f1fc862
- SHA1 9648acaee351e08daf2e4513c7e21107779b3f63
- SHA512 e56860be23dd5a8169d0f8236258c85ef56ff84ab49983d52f49b865273fef491491eaa4ef1f17b32ab14b8a47357d023ebcddf737b761c8d7af711334997318
- SSDEEP 768:NVJmHGpjD1EmPOvdPr2V76EC9RPr1CXaPopIq73YC0tYzY2Y1YRY2YLYmRYbYmYq:H6Gx1POlPr2V76E+PruaPopIq73YC0t4
- TLSH
  T19DE2557F46830D51F22054B060616B9C1453DB1F92FB386D2EA6BF6BA85C12D3D0DFA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  email-html-2.txt
- Size 16KB
- SHA256 9e3b9008513e008a5881e5b76f53202535aa6f78ef1d7165c6dcf1f1af5428a8
- MD5 d72deb887b3c22103626088c411d3549
- SHA1 10fe3e35b55d27596c51011795a1651087a880ed
- SHA512 a91efa5346e34ada9a4c73f3fbedb51766eb4deeee67a81ab6647d771cc699b524ab8c7314c24ca9034957cbcad5d05981c0016a9077f6fabd88c2cdecd2ecbf
- SSDEEP 384:LP6HVP66uV5D6bFyPrBdps4sJnHPyuIBmk60LCq0le0yCq0/Cq0RCq0TCq0CCq07:LP61P66uV5D6bFyPrvPsFHPyuIBmD0Th
- TLSH
  T15B7244FF47531A24184A70A2E4B79FC834F29737623429AA1FB9E7DBF4441240906FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  email-plain-1.txt
- Size 1KB
- SHA256 a08ba3649b88e9bd34b4c4503540fe6104c467fb7fd01db68dd36bc8036f80be
- MD5 135b1c4ae6d11d7d72ed943260fb247e
- SHA1 0c9d3f2cbc73a92d562d801f13ad08da52451db2
- SHA512 3309571f83d409b1a458a474f69fc26e992bcaa11c8e1dfcf665cba804503f9db0b1abbf4c8f82469f892b7778ecbf92a8ee0319cb7d431ec9ce78c2e28b890f
- TLSH
  T1CA31C160669F34CF9502E4CEE9163A463DE715FE7BA5539330242E7E70E3254912C32D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6