General
- Target WhiteheadGroup.co.nz-Release of Information 3.eml
- Size 15.7MB
- Sample260803-e8jc3acj5v
- SHA256 ecc0b03f9308a8277a239c4b7add67e7ebeee5f142df5b3b86efd9827e14b115
Malware Config
Targets
-
- Target ERA Problem Statement.docx.pdf
- Size 83KB
- SHA256 fdf92d3c7905e6a788728e19360de5e9b361ee19d29f584845f0bb9d9a548044
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target SETTLEMENT_ Fraudulent Dismissal.docx.pdf
- Size 80KB
- SHA256 65e9ff7e77ceaf676e1fa0b3f0bddada0fe569f7bfaa4f52f2d6730a179cbb03
Score3/10 -
- Target Gmail - Driver Licence Access Log Request- Jason Peter Clayton.pdf
- Size 141KB
- SHA256 07337f94d985e2bd16e68b761687cb36187fc0c82420279759c837e7fda72ea5
Score3/10 -
- Target Letter of Dismissal without Notice - 19.12.25.pdf
- Size 1.2MB
- SHA256 2f04e88cbf393514b252bcae46caf46043ac72ae23672b020d0db12f1ddbc91d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Metadata-Formal Disciplinary Hearing.json-metadata.pdf
- Size 226KB
- SHA256 528c80d21324abe81baae00d42547e9350b7d300aafbf860ce77a118044f32fb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Draft JC ERA Employment Problem.docx
- Size 11KB
- SHA256 99736279729e4d42f774a060ea7e6ed54335e533cfd35c5764dbcfac03a4058b
Score1/10 -
- Target ERA Problem Statement.docx.pdf
- Size 83KB
- SHA256 fdf92d3c7905e6a788728e19360de5e9b361ee19d29f584845f0bb9d9a548044
Score3/10 -
- Target Gmail - Driver Licence Access Log Request- Jason Peter Clayton.pdf
- Size 141KB
- SHA256 07337f94d985e2bd16e68b761687cb36187fc0c82420279759c837e7fda72ea5
Score3/10 -
- Target JC_ERA_Draft (1).docx
- Size 35KB
- SHA256 a168b9ec8e98ad6b359397e19605ffc18775dfa2dddbffff602b38a3bda5767e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Metadata-Formal Disciplinary Hearing.json-metadata.pdf
- Size 226KB
- SHA256 528c80d21324abe81baae00d42547e9350b7d300aafbf860ce77a118044f32fb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Revised ERA Application 090226.docx
- Size 18KB
- SHA256 39489d2734b1a4750bdea8fc4a15f529ba05bba7fcfdaa0f76947fc59caf55b8
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Revised ERA Application.docx
- Size 18KB
- SHA256 4e03574e965d1e776c6751fe967126b278aa21d9e00d61ff91506e48320d0082
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target SETTLEMENT_ Fraudulent Dismissal.docx.pdf
- Size 80KB
- SHA256 65e9ff7e77ceaf676e1fa0b3f0bddada0fe569f7bfaa4f52f2d6730a179cbb03
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.