General

  • Target
    CARTA DE DEMANDA DE DARWIN - NOTIFICACIÓN DE AUDIENCIA.eml
  • Size 32KB
  • Sample260812-s1s47ade74
  • SHA256 234bdae1fc93d26b3e1458b0df5cb4fd66960485d3b427fde0b73d31b73ea6d1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      CARTA DE DEMANDA DE DARWIN - NOTIFICACIÓN DE AUDIENCIA.eml
    • Size 32KB
    • SHA256 234bdae1fc93d26b3e1458b0df5cb4fd66960485d3b427fde0b73d31b73ea6d1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Loads dropped DLL

    • Target
      Captura de pantalla 2026-08-12 075656.png
    • Size 13KB
    • SHA256 7b525640355fbcb4397e2389af4b51405adc857db32e27f44bb30db2b499dcd4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      email-html-1.txt
    • Size 1KB
    • SHA256 11237616daad427aa71e433c446e1e91b685fd65c18b059313cb9e12cfafe083
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks