e2dfc1f3e65dbd948fed84dfaef5c322e6daaae131d9c76e24eccd4de924e7d4

Resubmissions

01/08/2026, 06:40

260801-hfkxzafb898

01/08/2026, 06:15

260801-g1eq1sfa474

Sharing

Copy URL Twitter E-mail

General

Target
release - jason clayton - Outlook_files.zip
Size 1.5MB
Sample260801-g1eq1sfa47
SHA256 e2dfc1f3e65dbd948fed84dfaef5c322e6daaae131d9c76e24eccd4de924e7d4
MD5 118932cceb15c6046d56ebb0dc9196ec
SHA1 bc442d29a15608ecd0003c39153d47801772687c
SHA512 d39392fa901e91c8767ece3e0beb0c79060e4b25f71fcf10bda7912bbb39bc4ab1ea853fb7d30c49a55a4707d5e79110b87a86cd2944ce844429fefa51223611
SSDEEP 24576:wDsGiAp8iaFaQCFSmw2t70UAEoCEIDEAEKl8tDRF7FB+T1PkToHzBIxsIVYX5SUo:7mp8BwTftIZEFEIDE/G8RRFaP8oHNIbN
TLSH
T10F653397C84078FAC15AFEF28846841E09A65F153FF5184705040B3EED6AFFD2E6E2A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  release - jason clayton - Outlook_files/Calendar_22px-hash-4b5e2360.m.svg
- Size 2KB
- SHA256 bf377c7cbdab09aa7d6e6449d1a6e4f4448983a0719df01bedc80e229ceb9841
- MD5 c7dde9b2ca4e4b23a7658f28d0133394
- SHA1 5a09650e5f86325677243f4a0899dd70a631ea31
- SHA512 261586450d20ed717e5d65edfbeee40dad4644dc195295b481f0df48d587910c28e0d47fa55af9cefb1248bdedb54d5a1585e3118060c5be0e22ece58968ede4
- TLSH
  T1685194F2E6EAD8CD994183E9D77464A0433F60B9F2404D814C2CEFA8E4358C1DA9F5C8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  release - jason clayton - Outlook_files/Mail_22px-hash-ef494f7f.m.svg
- Size 3KB
- SHA256 f1a79075bcdfdfc1cc5c10a45374dee2f1fc45bcd81f583c7570b2850047907e
- MD5 236d248c0a5054664216f15a50354273
- SHA1 c4de3d17b9d846c0809959abda132bd8e73e0e88
- SHA512 c8df5835bd483cc9412a5da206925de864a50c1be83408e43d32b03be0328ccc7cd8ec7a310187b20ad44bec44bcf5eaec4116824a0eb7486717a12136483d83
- TLSH
  T1AE7141B9B56CEC71F008A3B8E538C478A17F00BF9669C19141E0FFEA76149D16B4DEA0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  release - jason clayton - Outlook_files/People_22px-hash-6b8f0c5c.m.svg
- Size 3KB
- SHA256 dab53f19ad3d6705b29c27b4ec087bc9d1dc89fdcfd9c7cefb5a3a8161756106
- MD5 fcaaab144764999718156e54d536dbc2
- SHA1 18bb8e91d25fd9a3ce7a6dcc1283b83a79323ba1
- SHA512 ab9d2cf3f7d3a6122831f60698ac5585706c2c03508d20920227b693fbf9cb5b9378727c4e6fce08e7c86346a48f9793fcb0142c7c77edd170b2295636f75c76
- TLSH
  T10951E2DA8FA84695F400C3CDCD9B511823AFA5B7E1818B450260EFBF09598AD1F8CEA0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  release - jason clayton - Outlook_files/adbarmetrochoice.svg
- Size 1KB
- SHA256 9152fb2a54547e82f234013453253e58ee8c7a7634b37d897bc78a39e49af1a0
- MD5 929f6e2f8d1303e65ea24a1f37da693f
- SHA1 27684dff8940fbdad87c46faf81cf45768352c01
- SHA512 fecc368559cb6a820a124c79a106a865e18918908278d18f50930069bd4892edea590b19f986d9d5a51ad53e83833049783b1d82a61f67acf3de28073ce40e6a
- TLSH
  T1D33164E8215C87FA350AEA99E44B744107FBB0BD3748474DE2F36052462F0D6841DDB4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  release - jason clayton - Outlook_files/app.js.download
- Size 183KB
- SHA256 47783e8a1eb93ab40213a564c0de310670cfcfb311a98625141f881b90ab9f02
- MD5 ba9e1570c90a488912c86e82a2dc1929
- SHA1 47a9931a9a7d96e75e80daf60dd359b9d44e4ce3
- SHA512 27fb5d13b550bdaea97790be0798a72352c1607051ee766f99d17d93a9b284f2f42639dfdda94f8d4ac0673b778b70507b5d184039af68e798e61f033e000b62
- SSDEEP 1536:veZJBmAdQKuR4aTHOJ/KlKnCu4WJxM05JTzc7tNzlAIo86ApeC8F0SvpSLgR78fd:WHBZC02kSix4LFq8mQzPZg1+5Chi
- TLSH
  T11204E78032E2B5E682E990AE54322313E7761DA4340D8169FEACEDC57DD5E834337BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  release - jason clayton - Outlook_files/ast.js.download
- Size 186KB
- SHA256 bb9546414632262c7dcc6eeaf83f9565f44b1c16e29f6f2c871585e640726970
- MD5 92b365635bcad8f42c92946076ed4b0b
- SHA1 be4956a659cc7ef9a3a9c310b46d82eb58b0966a
- SHA512 0a0e85f006eae757a2a00185a481dd5de3f0ba29dc69cbe9d630706229fe21de4fe4847cd0c0f8599bf6da0265f47c58e6aec0493bd7449149ba238d9897ef8a
- SSDEEP 3072:MfgDtThdugXAReVm3InCMi75jvBzPS5Yzxbk/1m:MfgDJugXARL3InCD3q5YzGo
- TLSH
  T1B6145B9A33D5F07343A90996203B03117379C461390E94A0B65EACBE6EA798F5573FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  release - jason clayton - Outlook_files/async_usersync(2).html
- Size 52KB
- SHA256 55c7a9a7f6bd3a25bfbb5cb991e826355b6e7d3bc2b5f53f571db1bc2447491c
- MD5 5a6ba272b1dc717db23648bb6e7bd258
- SHA1 ada602a7e7c15b1ecae5367529ea96200adcee4c
- SHA512 e3705eac813e934c613fe63ebe5752c4a10fdafc437977e3d9aa228d5de0652f0a88922229c44280344d8d78825274b921c31f5cc51b6ef4349452cecafc9c58
- SSDEEP 768:Wcrbt0v6S3UbiINuGAIA0XieVpeB6ELQ1GHaLi5:WoBmM9e4E01GHa25
- TLSH
  T193332AD234F265D51BE00CE8849F176665329166280648F4E7B8DCE87C74ACFA07BBBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  release - jason clayton - Outlook_files/async_usersync.html
- Size 52KB
- SHA256 d89d5d80a60f39517c106175eca9c9ab0531033f2b85a69e0c71ada136b855be
- MD5 1098a09033660528f6011bc56875366f
- SHA1 2261bf077285582a3e5184edde5c37a7c102854b
- SHA512 9eee60170ba02dc149fc535be9a744a56a653451f413c31b32ab748ea2feade66b42214a04afaa5c1f4e76b5eedafc6a3596d14760cd2e9ecffead400e60398b
- SSDEEP 768:ecrbt0v6S3UbiINuGAIA0XieVpeB6ELQ1GHaLi5:eoBmM9e4E01GHa25
- TLSH
  T1C03319D234B265D51BE00CE8849F176665329166280648F4E7B8DCE87C74ACFA07BBBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  release - jason clayton - Outlook_files/banner(1).js.download
- Size 150KB
- SHA256 369ac92845d09b27e63d7979f84d557fe3754c12167827f9ba772da0e23153c6
- MD5 52aead55035768b514fbf66688171f63
- SHA1 e98efdd736958c990f730b65c6828712d923ff59
- SHA512 ab2345fb5a1d9716dfe74e8b74b490d7e8b0ae6b9218e8b3e94ecbdbfbe77f388e7b6b91e917de38ecc93d814a1dc1feb20ed39ca50e8e6c082f3c65facf1eab
- SSDEEP 1536:voXJpwCA/h+fzR/9aslJEclyyFE3rb6wi3O01cEVPzlYmokAped8+USvpuymhVOV:Q5pw2WiFduTV/VWqb9+sPD50F
- TLSH
  T143E3F8803292B4F286E591DE44310363E3391C95385D80A9FEADEDDABE55E831336FB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  release - jason clayton - Outlook_files/banner(2).js.download
- Size 152KB
- SHA256 0f3eda470ef78b774d1227e0b1ad8a5a4691f0ca9d39901bd5a8d8acb614741c
- MD5 b4c2d314ed0d8804fe74b93ced04e2ed
- SHA1 d8935f8012c32d13dae491aa7beb3aeacfdecb0b
- SHA512 18983c33c424bcf3e699f0ee13f7cf334a0a302fce14a16494759da6fd3cd8d0478ed95e36e1186315d7143c602feb5ab9d999246c3472e622a91d7c8dcc1ff1
- SSDEEP 3072:feThaRJjGxuNFgtA4Nv/XKKhjvAXiXwrpdXFey66bhpwenHrzOBSb95lPIlPrlrJ:3OBSyF
- TLSH
  T1ACE3FA8032A2B4F2C6E550DE44310363E3391C95356D80A9FEADEDD6B952E83533AFB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  release - jason clayton - Outlook_files/banner(3).js.download
- Size 152KB
- SHA256 0f3eda470ef78b774d1227e0b1ad8a5a4691f0ca9d39901bd5a8d8acb614741c
- MD5 b4c2d314ed0d8804fe74b93ced04e2ed
- SHA1 d8935f8012c32d13dae491aa7beb3aeacfdecb0b
- SHA512 18983c33c424bcf3e699f0ee13f7cf334a0a302fce14a16494759da6fd3cd8d0478ed95e36e1186315d7143c602feb5ab9d999246c3472e622a91d7c8dcc1ff1
- SSDEEP 3072:feThaRJjGxuNFgtA4Nv/XKKhjvAXiXwrpdXFey66bhpwenHrzOBSb95lPIlPrlrJ:3OBSyF
- TLSH
  T1ACE3FA8032A2B4F2C6E550DE44310363E3391C95356D80A9FEADEDD6B952E83533AFB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  release - jason clayton - Outlook_files/banner.js.download
- Size 150KB
- SHA256 369ac92845d09b27e63d7979f84d557fe3754c12167827f9ba772da0e23153c6
- MD5 52aead55035768b514fbf66688171f63
- SHA1 e98efdd736958c990f730b65c6828712d923ff59
- SHA512 ab2345fb5a1d9716dfe74e8b74b490d7e8b0ae6b9218e8b3e94ecbdbfbe77f388e7b6b91e917de38ecc93d814a1dc1feb20ed39ca50e8e6c082f3c65facf1eab
- SSDEEP 1536:voXJpwCA/h+fzR/9aslJEclyyFE3rb6wi3O01cEVPzlYmokAped8+USvpuymhVOV:Q5pw2WiFduTV/VWqb9+sPD50F
- TLSH
  T143E3F8803292B4F286E591DE44310363E3391C95385D80A9FEADEDDABE55E831336FB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  release - jason clayton - Outlook_files/excel_24x-hash-e4463318.m.svg
- Size 4KB
- SHA256 9dc62eb643155a3e8b311da2c343a75df60995c04774d5ab01f4b27cd18ad855
- MD5 614af55244dd0ed834f060725a2c11f9
- SHA1 483b7d18af24c1d0917d17c83c9ae18c9a691251
- SHA512 eb4c6a8e0c7a228f66eefd8881ea87640e46043f7d9ae63766e8e5362da91088a0839f3f1280c3f92ec5e58c506ac87ee343c9d034b37628dff5c62c20a43e93
- SSDEEP 48:2adLl+dLMNP8pLEP8pLkJRL/mJRLIOJRLGPLCZtLtZtLUDkQKpigurwSWnCHeYx0:znJGzE+1BaHvtN2zlyBysh41R6on/yIt
- TLSH
  T133A144A6D798A423F0E5C38CCEC68411365E91A796C0DD9181B0FF3F29A49C72D8DBE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  release - jason clayton - Outlook_files/livepersonacard_without-react_524056cfa39d9cbfb027.js.download
- Size 1.4MB
- SHA256 f07f47b918db838c4d7629089d0edd2dfc2558fa056f2aa06fcf3b5518d454fa
- MD5 4b0bd973f5f7cbab0fa993dd079f0665
- SHA1 c43e748607c4916d715d0fd2bfcd4b179e28c9e9
- SHA512 7ac62e0ef1074dc4ddda1589f7d0c6cd2674eb8282bb8051de8630bcbdb0270d4cdb22a8dc7cf941e18a02048f0eca543baeee4bea9d5dcc8e94eff568606c65
- SSDEEP 24576:5AfH55mF7f/hSDvpttZwJbhTJrSK4VxjPHRYOI+AmOkmMOkxzYFQbMjh5RRVkJS/:5AfZ5sf/hSDvpttZwJbhTJrSK4VxjPHu
- TLSH
  T1D6658DD4B244B07D675389BDC03F8451E32D7418780D8AE0F67ED9EE24A69CAE277E24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  release - jason clayton - Outlook_files/owa.mail.runtime.c58d0f8e.js.download
- Size 201KB
- SHA256 fc6fca6288c22961d063abaad598e75da0b1199bf0abe7714b5d6fdb5e81d3d7
- MD5 3fa5536d6115b9fd4de0707ad359f60f
- SHA1 4d6664fa9f8699d983b50558cdc8eedb0cb76ed1
- SHA512 7c6525c8ad59c9a5f92f9740064bffb0c1d5e0ed6ea29d9fbf29e1175e0a36ee39f9d9968e7a43d13c739dea35d8f3bb2ff9d4ac2dc9597d2c98c0ffa8ede206
- SSDEEP 3072:93sW1PSugGDigmQakmpBytkvQS+grQqORps32Chk3gRWJt:9dayigmQakYAkvQvoQ/6miXYt
- TLSH
  T1BF149D5CBB1DE4DA7EA009E1AF41A4FC6940721F3D0E07916CCCD3B620D9E7C267AA59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  release - jason clayton - Outlook_files/owa.mailindex.9982f1ce.js.download
- Size 391KB
- SHA256 d6830c3c33729d96aebb5e69786875b9422aa005003213c449d4323a764e6dd1
- MD5 daed266c7a1aa84da63813f65d33fa87
- SHA1 b4be393d77da10b6dbe2ef32317e88ce05664f13
- SHA512 e001981f944379930c75726e82280e4439e2f17923d6f3e831b5cc03ab8daec6519eefab4f4c2ba59fdfb8aa73ccdb8282f0ac16d8c060b8f369e314a581988b
- SSDEEP 6144:cfNRGHO+SfjH59VYg1KkKkAvWI8+QCqNL7aoUK1xDaeggexzDOc:cZBL7l1xDaT
- TLSH
  T1BF8407CA7282B0E653E311F9D02F400BE37A5995284D4428F264F8D6787956DA3B3FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32