ea8dc86b51369bb86f429184338de9965eb5d99342259f5a2e3902473ab22194 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

20251217-I...13.eml

windows10-2004-x64

1

20251217-I...13.eml

windows11-ltsc_2024-x64

1

20251217-I...13.eml

20251217-I...13.eml

20251217-I...13.eml

20251217-I...13.eml

macos-10.15-amd64

4

20251217-I...13.eml

ubuntu-22.04-amd64

20251217-I...13.eml

debian-9-armhf

20251217-I...13.eml

debian-9-mips

20251217-I...13.eml

debian-9-mipsel

Evidence bundle.pdf

windows10-2004-x64

3

Evidence bundle.pdf

windows11-ltsc_2024-x64

3

Evidence bundle.pdf

Evidence bundle.pdf

Evidence bundle.pdf

Evidence bundle.pdf

macos-10.15-amd64

1

Evidence bundle.pdf

ubuntu-22.04-amd64

7

Evidence bundle.pdf

debian-9-armhf

Evidence bundle.pdf

debian-9-mips

Evidence bundle.pdf

debian-9-mipsel

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

3

email-html-2.html

email-html-2.html

email-html-2.html

email-html-2.html

macos-10.15-amd64

1

email-html-2.html

ubuntu-22.04-amd64

email-html-2.html

debian-9-armhf

email-html-2.html

debian-9-mips

email-html-2.html

debian-9-mipsel

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

Resubmissions

14/09/2026, 17:50

260914-wembasfr317

14/09/2026, 06:02

260914-grh23shj6y7

14/09/2026, 05:15

260914-fxt6vsswfw8

30/07/2026, 03:58

260730-ejlrwscn817

06/05/2026, 23:57

260506-3zmk5ags4n7

Analysis

max time kernel
899s
max time network
463s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 03:58

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

900 seconds

Behavioral task

behavioral2

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

900 seconds

Behavioral task

behavioral3

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral7

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

1 signatures

900 seconds

Behavioral task

behavioral8

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

900 seconds

Behavioral task

behavioral9

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

Evidence bundle.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral12

Sample

Evidence bundle.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral13

Sample

Evidence bundle.pdf

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

Evidence bundle.pdf

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

Evidence bundle.pdf

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

Evidence bundle.pdf

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral17

Sample

Evidence bundle.pdf

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

5 signatures

900 seconds

credential_access discovery

Behavioral task

behavioral18

Sample

Evidence bundle.pdf

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

900 seconds

Behavioral task

behavioral19

Sample

Evidence bundle.pdf

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

Evidence bundle.pdf

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

email-html-2.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

900 seconds

Behavioral task

behavioral22

Sample

email-html-2.html

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

10 signatures

900 seconds

Behavioral task

behavioral23

Sample

email-html-2.html

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

email-html-2.html

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

email-html-2.html

0 signatures

900 seconds

Behavioral task

behavioral26

Sample

email-html-2.html

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral27

Sample

email-html-2.html

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

email-html-2.html

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

email-html-2.html

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

email-html-2.html

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

email-plain-1.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral32

Sample

email-plain-1.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Report Analysis Logs

General

Target
email-plain-1.txt
Size 7KB
Sample260730-ejlrwscn81
SHA256 ea8dc86b51369bb86f429184338de9965eb5d99342259f5a2e3902473ab22194
MD5 9c06cc5d5f9a02557386a1f94f726a28
SHA1 1ea30a90bdb78dfec362eed5e8537f1bc345d48b
SHA512 a5302d78a56fd22f0fb2bc9e7d7d49c5ce987aba08f221aa5d4f00811cfb3b97593f7bfb6d4d567d53f05affa210ebb2bbb8e785a5222cb7f699c35c4d6845f8
SSDEEP 192:hC0o5z5qQCvxe6d1j5kUHOH5T01EazKKL0E2jW8DuiaJ:heQxe6d1tkAOHlhgKbPwJ
TLSH
T158F1A75FB387236517A24360279D36ABFB09D07CE3242571BC5DA20C2368669933F6DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\email-plain-1.txt
1⤵
PID:4832

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4944

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy