Overview
overview
3Static
static
1Fraude.eml
windows10-2004-x64
1Fraude.eml
windows11-ltsc_2024-x64
131117.jpg
windows10-2004-x64
131117.jpg
windows11-ltsc_2024-x64
1email-html-2.html
windows10-2004-x64
3email-html-2.html
windows11-ltsc_2024-x64
3email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
899s - max time network
460s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-es - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 05:58
Static task
static1
Behavioral task
behavioral1
Sample
Fraude.eml
Resource
win10v2004-20260513-es
Behavioral task
behavioral2
Sample
Fraude.eml
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral3
Sample
31117.jpg
Resource
win10v2004-20260513-es
Behavioral task
behavioral4
Sample
31117.jpg
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral5
Sample
email-html-2.html
Resource
win10v2004-20260513-es
Behavioral task
behavioral6
Sample
email-html-2.html
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral7
Sample
email-plain-1.txt
Resource
win10v2004-20260513-es
Behavioral task
behavioral8
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260709-es
General
- Target email-plain-1.txt
- Size 398B
- Sample260810-gn844ack51
- SHA256 7b4fcb45f9e0fc27a88920afc1d1a921500f3ec3828699c61ad656d34c525830
- MD5 32f4dbbb2b99317649c9b3c87cca1dc0
- SHA1 7881d1e3ef5376b931295ae537b3d66fb41778b2
- SHA512 ddb5e68b287169a5f4792d3ed2b865b3d69890c1a80a2e539df28bd5be76759b3080a7df94b94ca8a9f173b29366aff59c6f30fa58101991f3b909317e8dabf5
- TLSH T112E0F83A9E080848DA834290318A4123A1D214B1FA46A5D7EC7E915040CCAA8EB8AFA8
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\email-plain-1.txt1⤵PID:2468
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:1536
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5092