Overview

overview

10

Static

static

10

Manuela Pi...a.html

windows10-2004-x64

9

Manuela Pi...a.html

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    Manuela Picard - Kozmetika.html
  • Size 826KB
  • Sample260802-dg9khashmb
  • SHA256 ad9be61bc241cb8c267ed6177a0d0eac4f07992e41e04e6e0372b506e3b894c1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discovery

Malware Config

Targets

    • Target
      Manuela Picard - Kozmetika.html
    • Size 826KB
    • SHA256 ad9be61bc241cb8c267ed6177a0d0eac4f07992e41e04e6e0372b506e3b894c1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discovery

    • Donut .NET loader by imphash — stable across all waves/branches despite per-lure SHA-256 churn

    • WinHTTP downloader by imphash — durable cross-wave-cluster pivot

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks