General
- Target Spam olabileceği için bazı E-postalarınızı karantinaya aldık.msg
- Size 54KB
- Sample260817-v96gzser2t
- SHA256 967767a8808626776db6804810aa7793391022a0d8db34ba771d9f086d241981
- MD5 6e3f3cba1485f9be7cd61d55c38fb5cb
- SHA1 a4bda5b4f12c8a9325bd2b5cbe8fa3d5400ea663
- SHA512 ea3850e0890828c7ed771acb2670bd2e3fb9b3e144f610359aad0b8ca4ce157f4f9716c3bb3a501754bda780dbad7b9dc7292ee6df93e20cf2f8197dad97b826
- SSDEEP 768:uAUmKnZ8IdKYbzN9NJkgM4sK20te4k01dLqMe8bpenv5WaE4eM:oZ8cKSvGgH+qe4k0348gA
- TLSH T13D43112436EA4619F27BDF325DF680D7D926BC92FD10864F3195330F0972A81A961B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Spam olabileceği için bazı E-postalarınızı karantinaya aldık.msg
Resource
win10v2004-20260513-en
16 signatures
600 seconds
Behavioral task
behavioral2
Sample
Spam olabileceği için bazı E-postalarınızı karantinaya aldık.msg
Resource
win11ltsc2024-20260709-en
18 signatures
600 seconds
Malware Config
Targets
-
- Target Spam olabileceği için bazı E-postalarınızı karantinaya aldık.msg
- Size 54KB
- SHA256 967767a8808626776db6804810aa7793391022a0d8db34ba771d9f086d241981
- MD5 6e3f3cba1485f9be7cd61d55c38fb5cb
- SHA1 a4bda5b4f12c8a9325bd2b5cbe8fa3d5400ea663
- SHA512 ea3850e0890828c7ed771acb2670bd2e3fb9b3e144f610359aad0b8ca4ce157f4f9716c3bb3a501754bda780dbad7b9dc7292ee6df93e20cf2f8197dad97b826
- SSDEEP 768:uAUmKnZ8IdKYbzN9NJkgM4sK20te4k01dLqMe8bpenv5WaE4eM:oZ8cKSvGgH+qe4k0348gA
- TLSH T13D43112436EA4619F27BDF325DF680D7D926BC92FD10864F3195330F0972A81A961B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.