759c3ab713418b496742b187a7ed8d756da731f80990fae28a503318045361de

Resubmissions

06/08/2026, 10:09

260806-l6vrmsydre8

06/08/2026, 09:48

260806-ls2m2aybnb8

Sharing

Copy URL Twitter E-mail

General

Target
09e1ce79-3069-3aba-b463-22b50343337e.eml
Size 186KB
Sample260806-ls2m2aybnb
SHA256 759c3ab713418b496742b187a7ed8d756da731f80990fae28a503318045361de
MD5 a48338a288d486d65f077a2e1aa8fa25
SHA1 585e2736988713515d25b6c8f85535f2d8e2b030
SHA512 4f8eb9fab82223d23fb17a0011df3c308d04a90de506deb967b4374baa0a04bce00fba0bbc110385deacfdf64e271bc3a8f735f30c142d81f9e6f1d6fbbf10e7
SSDEEP 3072:b+ByZmTs2iP9SkWFJFU3bYZZ9mU18slHeF:b+ByYTDKokiJFN9mCx2
TLSH
T1AE14D06D8E731C57461272D82954BD0B00E41D9BD56380F439A6B7A30FCF2AEEB5770A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  09e1ce79-3069-3aba-b463-22b50343337e.eml
- Size 186KB
- SHA256 759c3ab713418b496742b187a7ed8d756da731f80990fae28a503318045361de
- MD5 a48338a288d486d65f077a2e1aa8fa25
- SHA1 585e2736988713515d25b6c8f85535f2d8e2b030
- SHA512 4f8eb9fab82223d23fb17a0011df3c308d04a90de506deb967b4374baa0a04bce00fba0bbc110385deacfdf64e271bc3a8f735f30c142d81f9e6f1d6fbbf10e7
- SSDEEP 3072:b+ByZmTs2iP9SkWFJFU3bYZZ9mU18slHeF:b+ByYTDKokiJFN9mCx2
- TLSH
  T1AE14D06D8E731C57461272D82954BD0B00E41D9BD56380F439A6B7A30FCF2AEEB5770A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

adware spyware
behavioral1 behavioral2
- Target
  attachment-3
- Size 18KB
- SHA256 7aae321e5b3a6192d5db44ae9407c30d61639398a0050d10b86d9769ed52cbe1
- MD5 fb528d14fcc1686dba3e4d7d515d9e86
- SHA1 fe45d76b0c8c18bc92490fabf4f61b50ae2b103a
- SHA512 10ba3472bc38ffd6458e6c7096332dab99987ac3bab7aad343cc0ef7449cce88362ff08ce8fad254b9f90de806d7adaee3b239e61a9fcad8bb01c1a1c3803476
- SSDEEP 384:y4Ncm1F8VHqiUXTcl+ErDXzrPK8rDRiJSJKxiKVf+ErDXzrPK8rDRiJSJKxiKVS:yecm162XTcJ3K8rD2Bj3K8rD2BS
- TLSH
  T163828DBE9F730E528A1163C81ED4B81F01652CE799A384FD3956978607CF16CDB2570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  PLAY_Voice-+65-360-3928135865.svg
- Size 3KB
- SHA256 5a532c8d8e623783775d9cbabcc914d55e180e4e46cf6526f3efc00cc505e49b
- MD5 702b3540611aae0b7ac0672e63fa02cc
- SHA1 456f9599dabf9d438b4a68869d0c6badcbc863ef
- SHA512 2f1963a2b7474dfd5037a797979f7b55515bcbea2ad0790086fdb8740968ac8024cefc1249d00ea6103c0b7c5f439af6abd19759ba585ec72550c6f6c86f6fe1
- TLSH
  T1C9812CF83980E544439909B7A4BBCDA5E53925833AC49C84DA81FD5D6CBDDFA0D2BD0C
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Loads dropped DLL
behavioral5 behavioral6
- Target
  PLAY_Voice-+65-360-9788480939.svg
- Size 3KB
- SHA256 5a532c8d8e623783775d9cbabcc914d55e180e4e46cf6526f3efc00cc505e49b
- MD5 702b3540611aae0b7ac0672e63fa02cc
- SHA1 456f9599dabf9d438b4a68869d0c6badcbc863ef
- SHA512 2f1963a2b7474dfd5037a797979f7b55515bcbea2ad0790086fdb8740968ac8024cefc1249d00ea6103c0b7c5f439af6abd19759ba585ec72550c6f6c86f6fe1
- TLSH
  T1C9812CF83980E544439909B7A4BBCDA5E53925833AC49C84DA81FD5D6CBDDFA0D2BD0C
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Loads dropped DLL
behavioral7 behavioral8
- Target
  attachment-4
- Size 18KB
- SHA256 294a257b92f8c846e59c43725493f5687f211269e49894d5098741951b1fd044
- MD5 edf8db33b0e1d274f38c39ee9347642b
- SHA1 8b0208f0a3043f52b5b75783d79a004884973f79
- SHA512 97c655e9378a10df61cc802bde9965a7cbb3e909dc84332487525b467c081d9e177205b6a1eca8ea97f4975abfb96ccff9298bb8bdd9388b73781e88ba0838f0
- SSDEEP 384:K1/fm1FZcuWwt67+ErDXzrPK8rDRiJSJKxiKVm+ErDXzrPK8rDRiJSJKxiKV5:KBfm1rKn3K8rD2BE3K8rD2B5
- TLSH
  T11E828EBD8E730E428A1273C81A94B81F01A42CD794E394F93D7B53960B8F2ADDB5570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  PLAY_Voice-+65-360-2895206583.svg
- Size 3KB
- SHA256 5a532c8d8e623783775d9cbabcc914d55e180e4e46cf6526f3efc00cc505e49b
- MD5 702b3540611aae0b7ac0672e63fa02cc
- SHA1 456f9599dabf9d438b4a68869d0c6badcbc863ef
- SHA512 2f1963a2b7474dfd5037a797979f7b55515bcbea2ad0790086fdb8740968ac8024cefc1249d00ea6103c0b7c5f439af6abd19759ba585ec72550c6f6c86f6fe1
- TLSH
  T1C9812CF83980E544439909B7A4BBCDA5E53925833AC49C84DA81FD5D6CBDDFA0D2BD0C
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Loads dropped DLL
behavioral11 behavioral12
- Target
  PLAY_Voice-+65-360-6835153703.svg
- Size 3KB
- SHA256 5a532c8d8e623783775d9cbabcc914d55e180e4e46cf6526f3efc00cc505e49b
- MD5 702b3540611aae0b7ac0672e63fa02cc
- SHA1 456f9599dabf9d438b4a68869d0c6badcbc863ef
- SHA512 2f1963a2b7474dfd5037a797979f7b55515bcbea2ad0790086fdb8740968ac8024cefc1249d00ea6103c0b7c5f439af6abd19759ba585ec72550c6f6c86f6fe1
- TLSH
  T1C9812CF83980E544439909B7A4BBCDA5E53925833AC49C84DA81FD5D6CBDDFA0D2BD0C
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Loads dropped DLL
behavioral13 behavioral14
- Target
  attachment-5
- Size 18KB
- SHA256 febbd0c967bb0f7dbec933abd4fc047943b8e023981021288b5a84d1038d2ca5
- MD5 e13809608bd28bfbce8db050b83e57d7
- SHA1 40371299bf25aa632cbd17bc5e4a7b7129b4ebad
- SHA512 26b1b0535e3facf0b3617d6bdf72034ca48a96d30e77a00057aa446a2181cb21fa3483e2f27c534a928ac85ab5410f5e2a1c87623cbe0cfd6fc5c4e07643641d
- SSDEEP 384:PMNSlEJm1FZACYlv6DmUj1b5x2/+ErDXzrPK8rDRiJSJKxiKVBg+ErDXzrPK8rDD:PMIlIm1rTTbDO3K8rD2BI3K8rD2B4
- TLSH
  T103829DB98F630E418A1273C81E98F89E10E55CD798E3D4F97957634707CF268EBA1B09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  PLAY_Voice-+65-360-6062651018.svg
- Size 3KB
- SHA256 5a532c8d8e623783775d9cbabcc914d55e180e4e46cf6526f3efc00cc505e49b
- MD5 702b3540611aae0b7ac0672e63fa02cc
- SHA1 456f9599dabf9d438b4a68869d0c6badcbc863ef
- SHA512 2f1963a2b7474dfd5037a797979f7b55515bcbea2ad0790086fdb8740968ac8024cefc1249d00ea6103c0b7c5f439af6abd19759ba585ec72550c6f6c86f6fe1
- TLSH
  T1C9812CF83980E544439909B7A4BBCDA5E53925833AC49C84DA81FD5D6CBDDFA0D2BD0C
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Loads dropped DLL
behavioral17 behavioral18
- Target
  PLAY_Voice-+65-360-8145634681.svg
- Size 3KB
- SHA256 5a532c8d8e623783775d9cbabcc914d55e180e4e46cf6526f3efc00cc505e49b
- MD5 702b3540611aae0b7ac0672e63fa02cc
- SHA1 456f9599dabf9d438b4a68869d0c6badcbc863ef
- SHA512 2f1963a2b7474dfd5037a797979f7b55515bcbea2ad0790086fdb8740968ac8024cefc1249d00ea6103c0b7c5f439af6abd19759ba585ec72550c6f6c86f6fe1
- TLSH
  T1C9812CF83980E544439909B7A4BBCDA5E53925833AC49C84DA81FD5D6CBDDFA0D2BD0C
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Loads dropped DLL
behavioral19 behavioral20
- Target
  attachment-6
- Size 18KB
- SHA256 de0f7d6ee51efa33d3fa5932e8f546ede581ac58ac5525e85cea2883ceca6dc9
- MD5 ef3a7181824fd57da1177154c4ee4ef2
- SHA1 f1100613409ff5ab85f8d47ee15b9b152351783b
- SHA512 0bb227d4755c30cce68d8e198d1f60ab836131505880aadd9d69bd3ab0d51da07ffbd76cd7e6014c09da366a971fd8b2120b8546e707f4ee72c85eb48c344d30
- SSDEEP 384:YEwCHm1F8CE2YP3axSIQy+hY/+ErDXzrPK8rDRiJSJKxiKVvz+ErDXzrPK8rDRiQ:YpCHm1Y2YP3axSIQy+hYD3K8rD2Bv/3p
- TLSH
  T1BF829FBA8E631E42450163C85D94BC5F01B41CDBA8A394FA7C676396078F2ADEF1670E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

adware spyware
behavioral21 behavioral22
- Target
  email-html-2.txt
- Size 8KB
- SHA256 5eacce0201fdad363cc361808aab4d5ae3a648a09a24aae3d14642277fa4048e
- MD5 911000d6d52bd6e3a33eec09d3acf84f
- SHA1 35c88394eebf6cba5412afd4a53189f79f1f2ce8
- SHA512 dfac4d7f611cd85f6eda57e3a180dbb7496ae7a31d9836310d5ff063c907f660671ed06e945c93f670a3dc7a92ff598310885cc8680865c866aa0cef0a4a0cbf
- SSDEEP 96:VuD1kmBK5ucMKRHNoOroTSKiSriSqiSriS9iSrKSziSniShiShiShOS9vHS1nxh2:EKRHuOY67G7zZxzllx8HmnL3+wq8cUOx
- TLSH
  T11D02E303D5240D4B65FB90F0A06B2B64C085C74ED3196AE4B39A63B3EDCA6766FC3349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  email-plain-1.txt
- Size 437B
- SHA256 a2fc265820310376fa81f51e0a9fb50f82853ccdee54a3a3cc4c8ad0aada4d4c
- MD5 ea1ed44cc9664c5739888ad7d625d314
- SHA1 5b0681455805606891563d943c94ee9d793f8394
- SHA512 e0f824894b2906fb4f7b694a6010ac948e5561f47dd9bed7f4542d7816c3114b62ba0b10ae28e852b25cdf7626300d6122b0025007ed60c640ced3eeaeefcf02
- TLSH
  T134E0A395842BF01E8561F544791A46C11C0D0BD088E582D37F201B2C31898F4A1BD62F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  image001.png
- Size 62KB
- SHA256 461fbce36775eee3272755ee7dd440ad52edad964b623eb530728ec6b9d29355
- MD5 11e9c4d30e32171dddd3deff2535032c
- SHA1 e8fcf7a39af0a685c76a282b6a474e8a460f59bc
- SHA512 78ee3f682215ae23aedd61d9b6bbad92c0f3e8f80a3d00cd526eb30d952f7c91ea5153c5a9e9c276bef9737212d8ca6a3f6fc9d3a54daf2d1e6404ad4fc0398b
- SSDEEP 1536:SF4ZcHeryF0R7AtGBr2YIC6nroEnH570Z7Q32HUrc3qFrolw:SF4ZoeryFY7AIcBoEnHdGHUPV
- TLSH
  T1B35302527727C5433EAF202D46931F268055F9CEA0D1F52E9CF8891CF0E4D831AD8276
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

A potential corporate email address has been identified in the URL: [email protected]

Loads dropped DLL

A potential corporate email address has been identified in the URL: [email protected]

Loads dropped DLL

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

A potential corporate email address has been identified in the URL: [email protected]

Loads dropped DLL

A potential corporate email address has been identified in the URL: [email protected]

Loads dropped DLL

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

A potential corporate email address has been identified in the URL: [email protected]

Loads dropped DLL

A potential corporate email address has been identified in the URL: [email protected]

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28