e4e7fdec969d0d37fe424447321fbfd0f08a4d46513b4cab5baebd60695ecdd6 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

20251217-I...13.eml

windows10-2004-x64

1

20251217-I...13.eml

windows11-ltsc_2024-x64

1

20251217-I...13.eml

20251217-I...13.eml

20251217-I...13.eml

20251217-I...13.eml

macos-10.15-amd64

4

20251217-I...13.eml

ubuntu-22.04-amd64

20251217-I...13.eml

debian-9-armhf

20251217-I...13.eml

debian-9-mips

20251217-I...13.eml

debian-9-mipsel

Evidence bundle.pdf

windows10-2004-x64

3

Evidence bundle.pdf

windows11-ltsc_2024-x64

3

Evidence bundle.pdf

Evidence bundle.pdf

Evidence bundle.pdf

Evidence bundle.pdf

macos-10.15-amd64

1

Evidence bundle.pdf

ubuntu-22.04-amd64

7

Evidence bundle.pdf

debian-9-armhf

Evidence bundle.pdf

debian-9-mips

Evidence bundle.pdf

debian-9-mipsel

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

3

email-html-2.html

email-html-2.html

email-html-2.html

email-html-2.html

macos-10.15-amd64

1

email-html-2.html

ubuntu-22.04-amd64

email-html-2.html

debian-9-armhf

email-html-2.html

debian-9-mips

email-html-2.html

debian-9-mipsel

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

Resubmissions

14/09/2026, 17:50

260914-wembasfr317

14/09/2026, 06:02

260914-grh23shj6y7

14/09/2026, 05:15

260914-fxt6vsswfw8

30/07/2026, 03:58

260730-ejlrwscn817

06/05/2026, 23:57

260506-3zmk5ags4n7

Analysis

max time kernel
355s
max time network
727s
platform
macos-10.15_amd64
resource
macos-20250619-en
resource tags

arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
30/07/2026, 03:58

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

900 seconds

Behavioral task

behavioral2

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

900 seconds

Behavioral task

behavioral3

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral7

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

1 signatures

900 seconds

Behavioral task

behavioral8

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

900 seconds

Behavioral task

behavioral9

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

Evidence bundle.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral12

Sample

Evidence bundle.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral13

Sample

Evidence bundle.pdf

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

Evidence bundle.pdf

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

Evidence bundle.pdf

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

Evidence bundle.pdf

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral17

Sample

Evidence bundle.pdf

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

5 signatures

900 seconds

credential_access discovery

Behavioral task

behavioral18

Sample

Evidence bundle.pdf

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

900 seconds

Behavioral task

behavioral19

Sample

Evidence bundle.pdf

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

Evidence bundle.pdf

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

email-html-2.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

900 seconds

Behavioral task

behavioral22

Sample

email-html-2.html

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

10 signatures

900 seconds

Behavioral task

behavioral23

Sample

email-html-2.html

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

email-html-2.html

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

email-html-2.html

0 signatures

900 seconds

Behavioral task

behavioral26

Sample

email-html-2.html

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral27

Sample

email-html-2.html

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

email-html-2.html

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

email-html-2.html

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

email-html-2.html

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

email-plain-1.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral32

Sample

email-plain-1.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Report Analysis Logs

General

Target
email-html-2.html
Size 18KB
Sample260730-ejlrwscn81
SHA256 e4e7fdec969d0d37fe424447321fbfd0f08a4d46513b4cab5baebd60695ecdd6
MD5 25e045b5f5826a545a5e350eb5c69533
SHA1 104abdfa3f493035fbc9bf7a23002a7f5b67ce86
SHA512 47bad31be11e08945b500307fc0d804d0262710830e5b9ba7be2e257753b208b388757ec8d99a2aa3674c300b94818efc9c42ee275a5496e1eadf1df2aaaf848
SSDEEP 384:5RHNRHjRmRw7yo6DnzQS3Huz+DwH0g5sOWg6ZPtD6b0PGxpc4unaI:vLC/kKxg5sOWg6ZPtD6b0Spc4unaI
TLSH
T13382A333F7450267A0D313D922F82B817524C21CE313BC6AB576AFA933C59576B922D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/email-html-2.html\""
1⤵
PID:496

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/email-html-2.html\""
1⤵
PID:496

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/email-html-2.html
1⤵
PID:496
- /bin/zsh
  /bin/zsh -c /Users/run/email-html-2.html
  2⤵
  PID:497
- /Users/run/email-html-2.html
  /Users/run/email-html-2.html
  2⤵
  PID:497
- /bin/sh
  sh /Users/run/email-html-2.html
  2⤵
  PID:497
- /bin/bash
  sh /Users/run/email-html-2.html
  2⤵
  PID:497

/usr/libexec/xpcproxy
xpcproxy com.apple.sysmond
1⤵
PID:505

/usr/libexec/sysmond
/usr/libexec/sysmond
1⤵
PID:505

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:506

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:506

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:508

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:508

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:523

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:523

/usr/libexec/xpcproxy
xpcproxy com.apple.StreamingUnzipService 186
1⤵
PID:525

/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService
1⤵
PID:525

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:529

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:530

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:531

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:531

/usr/libexec/xpcproxy
xpcproxy com.apple.AccountPolicyHelper
1⤵
PID:545

/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
1⤵
PID:545

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:546

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:546

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:547

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:547

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy