50182d6d986bed5ab086f5cf66e25364748b5f539f0304b78a2e850428f03b29

Sharing

Copy URL Twitter E-mail

General

Target
FW Rombola Family Farms shared Completed File.eml
Size 1.3MB
Sample260820-a4snqaxbqb
SHA256 50182d6d986bed5ab086f5cf66e25364748b5f539f0304b78a2e850428f03b29
MD5 8bbde583c2d89e51e2dc5267ce995820
SHA1 c0398c46ed3716b6097c76dd61c43f4e663b58a8
SHA512 ced918334f0b8120ef3196c4bba75c4c5387db6e0acfa4040f11b74dcfa390518baac4d1650009777249f0666f1aba24e20e3fa8c6cb0810c7f829f14664e91d
SSDEEP 24576:77Xd4do0MZNJo8OCW+jLiDgU3cVkRKgEfZ2VMZNkdnj1PxJKvFN//Flp2G:7j+do3JLichNgompH0tp2G
TLSH
T16C552338E9497BC70325C1FBB30DFE407DC527878A875762235996BA79C10B06B2AC79
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  FW Rombola Family Farms shared Completed File.eml
- Size 1.3MB
- SHA256 50182d6d986bed5ab086f5cf66e25364748b5f539f0304b78a2e850428f03b29
- MD5 8bbde583c2d89e51e2dc5267ce995820
- SHA1 c0398c46ed3716b6097c76dd61c43f4e663b58a8
- SHA512 ced918334f0b8120ef3196c4bba75c4c5387db6e0acfa4040f11b74dcfa390518baac4d1650009777249f0666f1aba24e20e3fa8c6cb0810c7f829f14664e91d
- SSDEEP 24576:77Xd4do0MZNJo8OCW+jLiDgU3cVkRKgEfZ2VMZNkdnj1PxJKvFN//Flp2G:7j+do3JLichNgompH0tp2G
- TLSH
  T16C552338E9497BC70325C1FBB30DFE407DC527878A875762235996BA79C10B06B2AC79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

adware spyware
behavioral1 behavioral2
- Target
  061_sm_fb_781b9f7d-2d9a-41bc-82f7-95d3079ca0dc.png
- Size 1KB
- SHA256 293b0ed89a7719896c5874cf010952658e1b56d5aaf79f7e75bdf2db731382b5
- MD5 c8cda99807fe59d891364ac72c5c2fbc
- SHA1 b8eeb0e9dc13a4c2ec04abed4a034583f03cb96e
- SHA512 5331ddc11ac307a7250b7f78dac26d8e64dd0660c99d95a6c480d26966d04d18ef406762a00851a4d0bc55b75e37f8c7a09d70da6bd0ef992e1b8d4cf629d8ce
- TLSH
  T16921B40EF6012941B45CFC4945E1845F883B048088D0EAA7B8CEC4071B917B4856ABCB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  061_sm_in_ce2a0f25-1834-4e4e-9ff4-641f505131b6.png
- Size 1KB
- SHA256 4db4544faa7a375e6db66efc7db2c5568cc025f397a89dd4cf7d87377e7f9353
- MD5 bec5a8a32756e148e62512c1bec531a2
- SHA1 3817e3a5d648a9b4818ef3cf1e448eebbe3c1832
- SHA512 4b465a7e43eb5aadb6ba7a07d70b48a7b2bc6e4fc9f72fd8bd36c11e056935c88c36cd2ece4d3b6f32c66ee38b31b1fc43716fd1bd088075bddf09a828b2a0a6
- TLSH
  T1E621778EE9903D40715DAE0724F59827DE5A9490DDC0E871BCCEC156ABA61B1541F4CF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  50years(002)_062d1dd4-5dcd-4b33-aff7-fed71a722621.png
- Size 274KB
- SHA256 28b441fa5f4d3dfed1eae778e424b6a75a13fd489d7d6f1bec70f1eeda6e9828
- MD5 7094c9056380cd7cbaa6ec42fdf4f55b
- SHA1 0e3aff727537eebfebfb9640a017ef5a8fa88c32
- SHA512 cb4b3f5d4d4a54876d9c9a7a50d83cd4a1b5fe3ae2bb928896265c0887c4ad2dbf3c66f7b7eb5d2a53f859b7dce24be7333d8fee0b2286ac74e0779e76092d98
- SSDEEP 6144:uamE3TBlNJxQzRzXf9CTklY/Wjn9yyIsLEXA0JZtWsaviK:uafmzRTpRn9y2eZMdv5
- TLSH
  T1D35423991FC31F8F2248D147BA2D48508D88E6B191B7808E21EE44BBBF5225D2DE47DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  email-html-2.txt
- Size 14KB
- SHA256 e598c380e9c22aa9d888b53b9487e0916de39724018d4ba737dc9469ccec6f50
- MD5 e705ae15e1079771ddc26568dabc81ca
- SHA1 2c80f2738a291dacda273c1c2c47f4de8b4473f5
- SHA512 4a8a9ded3c6aa3f6f0c406b6755c98d1b66430ae88d69ac3924d2678ab7e4b4a7d2d55f01c23ae39e92169c1a88d14e8d5b151f19296c00e9d8b60f007d53866
- SSDEEP 384:YKRpKRDFf6BgT+C8TMTMTjh4YSNfr2f5p7V2Fsh4K0fdfyf9Vp:YU0+44l7V2+p
- TLSH
  T1F4626124F365088262BDA4F9F0577B6980827B0953BA1BF0F11971BB7D8F9B1225336D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  email-plain-1.txt
- Size 3KB
- SHA256 98e190f3e05a25fafec9d121ab0b079c2ca42dbbd00cf2c9e49fbc522e2c269f
- MD5 7098a02c041eda6763b263c89762d652
- SHA1 abe69ad3fd42aa99dc232847bd1963f7951f02b0
- SHA512 c093448afebe4ba419800fcb141e22aaa8e0c65a8d3c5334d443f23b16419ea7b71e5d4414d20cca33f7e73f93b4d351869232a316196e1388c197cd56803114
- TLSH
  T10C71A3BEF7C30B6305E344F7F506B7EAD787602D0AC966D23841A2140B08D26627A2AD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  image.png
- Size 282KB
- SHA256 0dae8e96675ece8bbbec94d1cc2aa4e123e4c76f82b034ae527418c6a6ffd7cf
- MD5 e945ac0fee948f13ad1b6e1b68fb3b1f
- SHA1 f8711f6156e437cd61035797d1fa9301f2315007
- SHA512 3886a1d558dcaa5165958e97f28d9eef8b10e6918f019df73ecea74fa9a160affb2e42a5e1f7c96c30c9d990a4682ecc695b353d016e9167dff6dfb1e4a93233
- SSDEEP 6144:aThnMzrltmz+150XqoQeNrtAqIREOOTyFaAHMFoqrqC939IP3g:adnKrizAaqoQyRABRpOeuoqT32vg
- TLSH
  T1F8541296E8985373E8B3DC3C87562EC4B558348A08CD0F6F8E31A7BE911FE345983956
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  instagram_32x32_de383fed-6236-4981-bff7-d7004aca703b.png
- Size 611B
- SHA256 e29031abcef82d58c5e448065426a9d6f61178b867e7ac74d1fa6bbceba373a6
- MD5 63f98c33c419a07f7c17ba190a873411
- SHA1 ed6631843ce7f226946bcaf56ee1e450c7aeabf0
- SHA512 06dc0891f840b0d1aee5ff37d35e1fd4abf5c322157b1e7a9a4c2e276fd3844cfbd42fde98057341c1a780fe794c2c2481b2a19e260a66b92c67f9b42169f591
- TLSH
  T1D0F002C56948BF88C7342CC4C1C2DD085ED151AA1E93CE21B11EC2255D6A64585C8741
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  rombola-family-farms-logo_fromsam_cbef9153-1f77-4a41-95b4-9ff7cb373e98.jpg
- Size 130KB
- SHA256 6677dbcd7b62737a04513a51d56fd92c6c17bfd7cff91cab82e0bcc610a77bc7
- MD5 2a485a2692e67669aeda5f989ef81cd7
- SHA1 dc67a2b3f63bbeda14eb0c79dd65a8b5c27bafc9
- SHA512 87d28d211468988ea06d6bf225730bffb20e317a3867fc4c52608a7533f27ced3ecf62e4afdeb3c84f5661acc679951d424b93ace710bac9dfec1f89f75aca4e
- SSDEEP 3072:oFRbN6zDWiIm3lkHOs3c5D0YZO62DfFAcwr7CyRe:oDbOVSMpfZXqfFBw/Cp
- TLSH
  T185D302CE483F05E7DEAD4BB756C958649C65235AD6289CC9C64C2AA3C2B1E04FDBFC04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18