General
- Target MAX WHITEHEAD C2- 31-7-26 - Fw_ Release of Information 3.eml
- Size 15.7MB
- Sample260803-s8dpgaep6t
- SHA256 8881d7b933b12929235d2f149ab7c00b26073dca9114dffe0f5f878cc87d1f2a
Malware Config
Targets
-
- Target MAX WHITEHEAD C2- 31-7-26 - Fw_ Release of Information 3.eml
- Size 15.7MB
- SHA256 8881d7b933b12929235d2f149ab7c00b26073dca9114dffe0f5f878cc87d1f2a
Score1/10 -
- Target Settlement Invitation.eml
- Size 226KB
- SHA256 79f21105c93ae55536e859d615ab1aa4a67b3e0bfaec09472eb92fe6bae102fb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ERA Problem Statement.docx.pdf
- Size 83KB
- SHA256 fdf92d3c7905e6a788728e19360de5e9b361ee19d29f584845f0bb9d9a548044
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target SETTLEMENT_ Fraudulent Dismissal.docx.pdf
- Size 80KB
- SHA256 65e9ff7e77ceaf676e1fa0b3f0bddada0fe569f7bfaa4f52f2d6730a179cbb03
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-2.txt
- Size 608B
- SHA256 48dd645a4e9ad56beed5493118c28f80f25df14707c194a66a0014bdd0081368
Score3/10 -
- Target email-plain-1.txt
- Size 344B
- SHA256 56f5033563f0037dd581639e0b3c65b857f6f63c69db9cb3fbb327bba3da68cb
Score1/10 -
- Target =?utf-8?B?UmU6IE5leHQgc3RlcHMgYW5kIHN0cmF0ZWd5IOKAkyBFUkEgZmlsaW5nLmVt?= =?utf-8?Q?l?=
- Size 42KB
- SHA256 413bd0be824240d5425f4b9fc9494898a60e949511c75336d23d9a40234436c7
Score1/10 -
- Target email-html-2.txt
- Size 18KB
- SHA256 b5282d3b4f69da20ea38051b3b1d27349c256642afe55fe491a345f946233c10
Score3/10 -
- Target email-plain-1.txt
- Size 7KB
- SHA256 492f67488367fd3ea256441fece2c21b5743a1ff777ab36b0c65f331204edb0d
Score1/10 -
- Target image001.jpg
- Size 1KB
- SHA256 b84ffd9ccb43cacc0e69e048ca72484f3b6d8d888003948d51de693c0514efcc
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Clayton vs Golden.eml
- Size 2.2MB
- SHA256 bc6a9212a57bff5040db7e935a28d1fed5d3cec099dbb79d98e86b223f0b508c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gmail - Driver Licence Access Log Request- Jason Peter Clayton.pdf
- Size 141KB
- SHA256 07337f94d985e2bd16e68b761687cb36187fc0c82420279759c837e7fda72ea5
Score3/10 -
- Target Letter of Dismissal without Notice - 19.12.25.pdf
- Size 1.2MB
- SHA256 2f04e88cbf393514b252bcae46caf46043ac72ae23672b020d0db12f1ddbc91d
Score3/10 -
- Target Metadata-Formal Disciplinary Hearing.json-metadata.pdf
- Size 226KB
- SHA256 528c80d21324abe81baae00d42547e9350b7d300aafbf860ce77a118044f32fb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-2.txt
- Size 3KB
- SHA256 12d07ac6dba7f208c3e4cfd5dc0efd84d57f548741ef2186450bd3d3afa23ba7
Score3/10 -
- Target Draft JC ERA Employment Problem.docx
- Size 11KB
- SHA256 99736279729e4d42f774a060ea7e6ed54335e533cfd35c5764dbcfac03a4058b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.