General
- Target CARTA DE DEMANDA DE DARWIN - NOTIFICACIÓN DE AUDIENCIA.eml
- Size 32KB
- Sample260812-s1s47ade74
- SHA256 234bdae1fc93d26b3e1458b0df5cb4fd66960485d3b427fde0b73d31b73ea6d1
- MD5 413053e2130cbd72a176d353567501f2
- SHA1 200d8037629e6255a15935b88687a1fd27061e2f
- SHA512 945e337134c65f4b5c3dc341e8e285cb80cc9cb3e1d6fed1272bb355cd34effaa5fc722986d1b4fa077dca783dec63e5106b60b46fc944982b25fb6e2f221427
- SSDEEP 768:6z9TP9gCDCyTW/Z7gqa4nrLSRJbdgfHVeh5lD2uvdXVWNdhN:NC3TW/x1gZd8enlD2yhINdhN
- TLSH T128E2D0025A472E53C361825C6C209C2830A1794BA8BFB085725F63FB5FD75B63D7E886
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
CARTA DE DEMANDA DE DARWIN - NOTIFICACIÓN DE AUDIENCIA.eml
Resource
win10v2004-20260513-es
Behavioral task
behavioral2
Sample
CARTA DE DEMANDA DE DARWIN - NOTIFICACIÓN DE AUDIENCIA.eml
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral3
Sample
Captura de pantalla 2026-08-12 075656.png
Resource
win10v2004-20260513-es
Behavioral task
behavioral4
Sample
Captura de pantalla 2026-08-12 075656.png
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral5
Sample
email-html-1.txt
Resource
win10v2004-20260513-es
Behavioral task
behavioral6
Sample
email-html-1.txt
Resource
win11ltsc2024-20260709-es
Malware Config
Targets
-
- Target CARTA DE DEMANDA DE DARWIN - NOTIFICACIÓN DE AUDIENCIA.eml
- Size 32KB
- SHA256 234bdae1fc93d26b3e1458b0df5cb4fd66960485d3b427fde0b73d31b73ea6d1
- MD5 413053e2130cbd72a176d353567501f2
- SHA1 200d8037629e6255a15935b88687a1fd27061e2f
- SHA512 945e337134c65f4b5c3dc341e8e285cb80cc9cb3e1d6fed1272bb355cd34effaa5fc722986d1b4fa077dca783dec63e5106b60b46fc944982b25fb6e2f221427
- SSDEEP 768:6z9TP9gCDCyTW/Z7gqa4nrLSRJbdgfHVeh5lD2uvdXVWNdhN:NC3TW/x1gZd8enlD2yhINdhN
- TLSH T128E2D0025A472E53C361825C6C209C2830A1794BA8BFB085725F63FB5FD75B63D7E886
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
- Target Captura de pantalla 2026-08-12 075656.png
- Size 13KB
- SHA256 7b525640355fbcb4397e2389af4b51405adc857db32e27f44bb30db2b499dcd4
- MD5 f746dc80048ea2a44473dcac10b5d24e
- SHA1 96213cfbb10a76efc02af4c60409e4122d411dd7
- SHA512 a332176749028d62252d336e6f3f36e5b37e2bbb400aaef810b75614c4c2f3c747ea34079f0e232a088f215b22617874ac4281a3196a75f6d7a9d971933f20a0
- SSDEEP 384:T8NmkQnJgLNIHNnLqyVUnvVvz4fksEljxrCGK+:T8okVNUNn+VdsfkZge
- TLSH T13152BFC34373EC95B76E2BB174D1D81F31AB998A35D846AF42A0C6095F42887D88E54F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target email-html-1.txt
- Size 1KB
- SHA256 11237616daad427aa71e433c446e1e91b685fd65c18b059313cb9e12cfafe083
- MD5 6b4608a0aa140145aba4e9bbcb3d9822
- SHA1 62d4b1072ef5d21ebd658a825031eba3948c013b
- SHA512 71552669d53c5f61142ccf11598312278e6c1b3de3c902fafc2a1c7a3c140b0445758525919531083a9acd6688dcd1d8b59431c687e26fa9b33c52d112c2e015
- TLSH T1642188F29CC0008594A3CD49B475E6FFC402734BAE025E81562D17796ADE9AE8D0FA49
- MD5 SHA1 SHA512 TLSH
Score1/10