8a52dafe88b568b658423947cfd92c11c7020410151e5252e5711f27ca308ca2

Sharing

Copy URL Twitter E-mail

General

Target
GoldenContracting.co.nz Invitation to disciplinary hearing - Alleged Serious Misconduct.eml
Size 6.8MB
Sample260805-abkgmsaf43
SHA256 8a52dafe88b568b658423947cfd92c11c7020410151e5252e5711f27ca308ca2
MD5 765f440e9815bdf65ed5560579b79649
SHA1 e84bf642519d830d1b5ab0c6681570f36269d133
SHA512 41fb9a91634db620a3b931e33093b8117542077529ccc49e574828bdf3b3a2ef65d6acf1feeabaed891d498c0de2c933149eff3d42a0582223df58bb2b0210b2
SSDEEP 24576:SImlyGc4rBUVEOrSexlpKqnT1PoDS76ZsA2nayI21gHjrAMuOdLxBMtWvoyLtC3w:m4pKqnT1fqyI2Yuo/MG2w
TLSH
T1DB663A138202413B627397E8F54BE74EFB668D0DD7030E75B7EA65D4CBCE8A121963A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  GoldenContracting.co.nz Invitation to disciplinary hearing - Alleged Serious Misconduct.eml
- Size 6.8MB
- SHA256 8a52dafe88b568b658423947cfd92c11c7020410151e5252e5711f27ca308ca2
- MD5 765f440e9815bdf65ed5560579b79649
- SHA1 e84bf642519d830d1b5ab0c6681570f36269d133
- SHA512 41fb9a91634db620a3b931e33093b8117542077529ccc49e574828bdf3b3a2ef65d6acf1feeabaed891d498c0de2c933149eff3d42a0582223df58bb2b0210b2
- SSDEEP 24576:SImlyGc4rBUVEOrSexlpKqnT1PoDS76ZsA2nayI21gHjrAMuOdLxBMtWvoyLtC3w:m4pKqnT1fqyI2Yuo/MG2w
- TLSH
  T1DB663A138202413B627397E8F54BE74EFB668D0DD7030E75B7EA65D4CBCE8A121963A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

adware spyware
behavioral1 behavioral2
- Target
  attachment-103
- Size 285B
- SHA256 3da3a959db2044a32d2d126ff6411264f35312f4747ca90752cc6e0a9b1fef29
- MD5 cc1830308147d71fd4b7cdb97fcbada3
- SHA1 7717f2f3177160a847107a0c7377d40b3c3564b0
- SHA512 a3972e0cf575edc156280b762e562b0c765e713d048b67dc3dd6f66fa66f4540fcde07a42dde42f4263ee76a69da2cb2d5a967fb2b6f4b59cd55365451a49232
- TLSH
  T157D0CDA587C867081F505FE0F61552A0535FF431476DC0BDA554E6F92444457D84A508
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  attachment-174
- Size 213B
- SHA256 6285e8ff6e7c5283f62f043595c9a1620e2b8f24ecb940d53e1c1b07d000d434
- MD5 57ef0dbaf868bf2e91cdc5bbd0a25eaf
- SHA1 ad02b479e01feb28d0a12de73271e4a557ae0e2c
- SHA512 cbbca5798b31b6a093daed6e1c35ce8877286b7576e10e5b609bedb2a5409bdc2207573e9646ecfde116d4eef5173e585513b4101d62a061458609f698adf9b1
- TLSH
  T101D0A706A9721916508B2165F8A38149933A35D3780042B8B9E01464D30D1905521674
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  attachment-176
- Size 56KB
- SHA256 7bef115cd466351bac323c42bc974d61db9185712d90c895d07be44515874b2e
- MD5 4b038eb7589725f74845287a89fc7183
- SHA1 b3dea553926a81a34fc1a05af701d55d773634e5
- SHA512 23dfa578810a87d6670e4102514fc760c3f42b9e40920e81751bc618571558b8bf5087cd138a03321d0ec8c6abb95eea8e2db45491c8fcb4d29361f1567dfeb2
- SSDEEP 768:SF2D7Ucnb0fxltjYGfsW3p3regjV+hj6AuITVug+Mjf1jWFjgu+qjxDVS:SynYpC20X
- TLSH
  T11C4321104107941656A3A85273CE1A30EF1D22796242A171B2FE5F9FCE9F4BA43B4BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  attachment-183
- Size 122KB
- SHA256 7edb4bd45599859d3c59c395db7809d296e2262da9b983e707dd368ee71bb36f
- MD5 761f96194dfc827f3eedd73c988a3f44
- SHA1 862ef56f0010102dd56553c9977de1f1616222fb
- SHA512 4dec85de5bbddb88c180f13666f89b29a11516033fe73bb55b526f4a52de9920dc57c3194e7eb7eaa1cda62098aa7df1add392cefbb564111bc9145c2dd7fb0d
- SSDEEP 1536:ZVyfsfsbgbU3K5AExhw40wp1TaUCAZKVAxspTPQWJJPhXlmniysBHi8PJDbrRBi2:gsfsrWspXPhXlmiHPJqomg55
- TLSH
  T1D8C33B17D3460243F0679B56E6CFDA9DBF649141F007A9FEB8F12481C34EAB8129A39D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  attachment-188
- Size 152B
- SHA256 ef760a4ddc3c6450eca3f3c3dc4588bb6de0346dcc812eb4dcb8bce9c8bd752e
- MD5 ea1c9ed762ebaccbadab8dde25051b49
- SHA1 8407c7639c42211efbf6ee91e7b89646e81d72c1
- SHA512 9f3879bec6858ec9f30402330109a918e6a2ab3446316069743222926588bb3e7b99d61e962807c01a4c996a0a643b68a472ad09be7661c3970630a5a36b4d70
- TLSH
  T105C02B478306D82F3E1E0700795F2B4AD8B9B850E478FBBE523FA0E0702B0928232410
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  attachment-190
- Size 23KB
- SHA256 04c94d400aaadc4a553eaccf49d637fb2d0cee527d28d35be16ee8bfc5c463db
- MD5 5b307f0ed055e330ebd946b6670251ed
- SHA1 a4f3ff5f133a00ed2479605f6b33dbceca5c4de6
- SHA512 c5970e54a7bedd494bd1a3696c4c1edbb16cf73f1c6029bc6adaa70cf4973a575b78a660f4566047a8edcbc31538c5b8fb0167a0d5f25867b39b98749e44d92a
- SSDEEP 192:YUl2yy/wMIDmgPI/yQJ3nAoRbqGIwVpL6Ew4sGbqGIwVoL6G9c:YUl2z/tymgP4ywXzFqYs36qYt
- TLSH
  T10BB221228207D42516A3BC4273CE2A25DF1D217D22419172B6FE1FDD8D9B0B943A5BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  attachment-193
- Size 27KB
- SHA256 f03b3b8840ea43b0cce961247343887912f3251c3a301ed4f0a875f414291e4d
- MD5 bee15bea215830890b75ca3f349f6cf8
- SHA1 8e4f8bb15533e24e602f3d05c7dbbb92612419c4
- SHA512 2a5881f17f6163cb9f6eb37be5c139a27fb51cca0d5c0c0325098e638e192d1e7bc0f19b6b18aa9a00bbd4301d4dc8a42138ea4c40edccdaf32c997927479970
- SSDEEP 192:pv9QfAThQJjTN3si22mD9ORDabqGIwVOMajqUWVND7niay/mgGPCa8C8cahFWzB1:63cqYQ2qY56qYi
- TLSH
  T17CD24327A22BB92A56935941B3CA6936DD0C612D6200517173FE4E8F8D4F4BD83E1BFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  attachment-195
- Size 22KB
- SHA256 1670cc058560daaa0c142877a7d10be587fd62b2be39270dcf3274eff4912b7a
- MD5 f78035ac24e2c8a69bfa7811bda8c3b5
- SHA1 03d8e176cdf0a992aa33d12b040de210caacb2e3
- SHA512 91f9f2289e4ba992d872ab8998d3b2f06f7a658a3d1d7b20483105382780f27cfdb9440decfa225d70f033c4e68c7ecdccb731cb1c1779990a9acb94aee74848
- SSDEEP 384:HioLQKIUUl2z/tymgP4yw9hxYBnL4MILMO:HioLQKIUUl2z/tymgP4yw9hxYBnLVILl
- TLSH
  T1B7A202168107D4295AA3AC46B3CF3D20DE0E103E514391B6E9FE5DEC9DD706A4392BED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  attachment-201
- Size 332B
- SHA256 b77e2b1c148a16bab324280b9a795de48ed422c823e20d253061c0a98f06efb7
- MD5 fa65050c0be1ce3e8dc9b1c0ef16270d
- SHA1 468c1118d71067343162d1ab0d5097d23c4e3320
- SHA512 8e01ee501363980ae89cadc7488b053f7516a1ff5ca498fda3d13b092dedb3b6ed4a97e7ed817199ac59d4758009cc4edd2fa97397f1531415da5d4f84ba716f
- TLSH
  T12EE0803543C2102E74539790D593A354643DEAC57D240E5E31D550F1D7851EC083BF55
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  attachment-203
- Size 75KB
- SHA256 8abbb061bd1f149269ec383951023de5d139d97dc6a4db6feda16b69ab5865c3
- MD5 42aabc5c67ac6e4d3f2508aa5cc097b9
- SHA1 f2a7d178b11a825382d6719668597d235172fcd1
- SHA512 0890d38aa76013bd3195b49d1a4834ac6ce2e025fa8b24498369f2e0b13bfb79cd18f91c9a0e1184819cdb310ce5b132308baa3ab0cef467ea615506bb813ae2
- SSDEEP 1536:70i/txJD39bRZazJh918JwzLdG7AMcsZf7T366Q46HvGqB2nZperGLlWstTTCn2:J/nJD39bRZazJh918JwzLdG7Y4QB2nZl
- TLSH
  T11073A713D64A753BB267F778F6EBE3899F288212E0150B75BDE65004C3CD2E40366B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  attachment-75
- Size 43B
- SHA256 b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
- MD5 325472601571f31e1bf00674c368d335
- SHA1 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
- SHA512 717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc
- MD5 SHA1 SHA512
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  attachment-76
- Size 43B
- SHA256 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
- MD5 fc94fb0c3ed8a8f909dbc7630a0987ff
- SHA1 56d45f8a17f5078a20af9962c992ca4678450765
- SHA512 c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e
- MD5 SHA1 SHA512
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  attachment-77
- Size 1KB
- SHA256 3cf6b89a33150efb74cf5f2323f3d021897ae83404e98600613949fad441aa05
- MD5 16da1751a158a03dae7208ee1f36a1a3
- SHA1 6fec1fba0a8ac265988a527f067f0ce8c09f42ff
- SHA512 de2eaa7244569e12e98123af3c98ebbed2a5d54dca17a7c06a8d0c7ea30cdb2d786dd00b5c94e3f5f21e51fea06738f442da02c1adc42248094ec39e58dca65b
- TLSH
  T1354123F4534867E48A47E3F0D8242472EFDF36BC57904FD59280B5A53A160D5588DCD2
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  attachment-81
- Size 13KB
- SHA256 0a63cfe86c2728be0edcf2fcd169b50d4db471720859387d5e250cc5db011cac
- MD5 8bbe81935a80a9f5caba4d503c0c2997
- SHA1 d270ffaaa7a2c0db071933b0aaef43fe76224dbf
- SHA512 bcc6b584ea550995bc79388ced2e14201e76a7a2ad034fd00032fde1a89b60476646a6f5e9a597d31a88fbfcc8df34984890ae341781344246589bc1334d20c3
- SSDEEP 192:UJimkx3wd9Ota+ZzkMLbE4zOH9H0dgzF/Z258A0uDf0PRWx+SeRWdcbd:AWx3wTOtnZ5Lg4iH9H0yJRWtMWgbRh
- TLSH
  T133522E57820913772C57E72CF287D7C8BB221359981C07FBB8E90450DBCE5B871A976A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  attachment-83
- Size 20B
- SHA256 e353cbfdb200b15ddc523e92e7b803e3ba8cadb74a5270baa3aea5b779319c98
- MD5 3b288788e28cac582c6ebd9a98a1f793
- SHA1 2c06b611a44162aa35b1a919e8827c8afe6109d0
- SHA512 d9ff6cdf035867e3e92f9a71577a19a4176f02b77f869bef76d5e6ed9094f629182bdcb4b72501e6f24cfb46d0ce9faa2888311b9289cceb64718ed26412f0a2
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32