ed76c194118f29cfe4cd5d03c63e3c33af9709c66922aabac222f20eb2ed7e6a

Sharing

Copy URL Twitter E-mail

General

Target
202608101512_Detalle de Facturación Digital [Cod. 495936] — Evite suspensión temporal de servicios_ecarollugones.zip
Size 14KB
Sample260810-wvldyahg35
SHA256 ed76c194118f29cfe4cd5d03c63e3c33af9709c66922aabac222f20eb2ed7e6a
MD5 8a433d25d9de4deb40893941b3e53154
SHA1 c815427a53ef101272e6cef57f4d958ed8e84ebf
SHA512 44c9c65fcbe593f30d10ffd05673036d3bad5a8a114535a605c37b0c8b2574fa142f174e04da3cbc0e920e2f3066a4a871747778a9eceebca54cbb85c057e599
SSDEEP 384:Fvk6i4cn+CQBFbpfmQ8uJj8KjyKN7SH6aL8UpH+OlN:JS+fHbpf2B8yKAH6aQKHPN
TLSH
T1E362C0A5C30F1C19D1587A767CAA9FE6D00C904D9EA36DE3EDB3B205957A2D42903386
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  202608101512_Detalle de Facturación Digital [Cod. 495936] — Evite suspensión temporal de servicios_ecarollugones.zip
- Size 14KB
- SHA256 ed76c194118f29cfe4cd5d03c63e3c33af9709c66922aabac222f20eb2ed7e6a
- MD5 8a433d25d9de4deb40893941b3e53154
- SHA1 c815427a53ef101272e6cef57f4d958ed8e84ebf
- SHA512 44c9c65fcbe593f30d10ffd05673036d3bad5a8a114535a605c37b0c8b2574fa142f174e04da3cbc0e920e2f3066a4a871747778a9eceebca54cbb85c057e599
- SSDEEP 384:Fvk6i4cn+CQBFbpfmQ8uJj8KjyKN7SH6aL8UpH+OlN:JS+fHbpf2B8yKAH6aQKHPN
- TLSH
  T1E362C0A5C30F1C19D1587A767CAA9FE6D00C904D9EA36DE3EDB3B205957A2D42903386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  20260809220822-Detalle de Facturación Digital [Cod. 495936] — Evite suspensión temporal de servicios-ecarollugones.eml
- Size 36KB
- SHA256 eda4d0937e5cf3d7edec1440f53241c87c30499d2408a1323e585e75d78ebd3d
- MD5 37e10e9ba4c6ff5cf6bb180aabc7d991
- SHA1 0a7a7496289d562a7386f036a90142d0645a0856
- SHA512 4b8b6e95451cb888f5856af181c3f98a2129577842d88ae576b0b51fb4a45919c1aeef527896448b497d08bf61ea78393923b5b0d27e78f2a0defd22f97a7e1c
- SSDEEP 768:e7AVsdJIgDq+umcHnOxrDxVBUTNwVszBI71OuaayyyIvQd2SYvM:e7BDIgD4mmnOxrDxVBUTNwVszBI71faz
- TLSH
  T141F25CF2861326B1CB551D025C0DEE071136FF43E2BB409055AFD7A91DE95BA2DC2EB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral3 behavioral4
- Target
  email-html-2.txt
- Size 14KB
- SHA256 e3d9a686995038479aede4829e6fe1e8f7b3b68d75a402e3f41e08a4ef390072
- MD5 c96f5a981804762c51d015d620f33200
- SHA1 f1ca77289ed38dcc05d1f9f9ac1cdf682c2afb90
- SHA512 acd0a1f72fbfc06e3dc8e27bbebdd9d9f07e4aa3a502d973e226306540414412ad98378cf335b67473b4a7c111b4513271d5035e8bf56c0df48bcf25f6eddbec
- SSDEEP 192:Wqw734CU5tpU0dntUS5s68R8eMbhrfR3RdIaK9xWwK0+OXunDyGHHnDyl7oiOZLI:Ik1lwMfNKHc0dq6FGV7ren
- TLSH
  T10562FD3297412E1B69B599B5F213EFA5D3DE0945620847F0FCA78137AD8C4380BB67AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  email-plain-1.txt
- Size 2KB
- SHA256 f474f1173c4a3029c1dfb4536e22c66d896803f556af45fa0819adc9a5931bc4
- MD5 19ae4980aed225129a081ad322283c34
- SHA1 1d2366ab192824e105e13033f1ca7250aea93646
- SHA512 79304d6e309644807b977370ab059b1c4a6bdd2f0459bb42796c6a8160f2fda98d23b5860becb0ded8eb7a2227ad17f5d10c85c18234b348203c25b22ddc45a6
- TLSH
  T1B751E93705CA0EA6B2B172B1EFC3DA2FB2CD4044F1588905B09D472D43CC49C59E9DA9
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8