77e45b0dd66b0c0bc24fb624ea61fddd411d95f2876e70d71532384a812482e2

Resubmissions

20/08/2026, 03:39

260820-d7x96aygld8

20/08/2026, 03:29

260820-d2dcss11cv8

Sharing

Copy URL Twitter E-mail

General

Target
e898836c-6b60-ec5a-4b0d-cb3496b7fb1e.eml
Size 1.1MB
Sample260820-d2dcss11cv
SHA256 77e45b0dd66b0c0bc24fb624ea61fddd411d95f2876e70d71532384a812482e2
MD5 4309001ad1789670ce64f137fdd65d6a
SHA1 6e435dfd52ed3bca4eda6fa2fd71b159d7454cf4
SHA512 63fd923607078b020ca9782b76724687001d4b231f890e7ed58e77b8125a201ab388079ea9246fb770afca9b027232a8e96490955ac920b76f070cc45df6ab38
SSDEEP 24576:C1QMjf0+2f0Szjh2Pvekn1mLjKC3uJkQJ:C1QMjf0DNjjGceL
TLSH
T12735F879EB9502C362BAAAD0B0972754EC815F1FE3618BE0B12921755CCEC5137A13FE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  FM VN - LVCM2 - Certificate of Corporate Representative (Ordinary Shareholder) - KW draft 19.8.26(49213355.4).docx
- Size 24KB
- SHA256 8dc650dba8747d491af25ccd145d460d79ce0b865e349da97c2cb56676b59a1f
- MD5 c5c87ceffbf9fb74ae1fe673a58d6daf
- SHA1 5f7dd31cacb1d3cc1c4a0f3d88c1f250c8d5402d
- SHA512 983b6885a869cf8126bc5c4a589228cf19f9ea6ac39552681b2507e3fae11e6d2fc6b166f6e234564cef460344452915c91c10a456c4776359fd7fdfcc734467
- SSDEEP 768:KzdmuRnQYHm9ne46aqrcKv132u4b7dgDV:KpmFYG9nJqrtv132luDV
- TLSH
  T186B2CF39E029ECA5C517097DE44B02F6D7654D4A9343A66F90C3F3856F83AEB036928E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  FM VN - LVCM2 - Directors' Resolutions (Company) - KW draft 19.8.26(49213311.4).docx
- Size 44KB
- SHA256 c4c845538bbc562eb222e0e47388ada1a7a13a0494c9cb213da86c2debd5ab14
- MD5 a2c153d46261530281c6ba858f938de1
- SHA1 69af2c26b54c8df410febf0e7cc8adc77f52ed93
- SHA512 aa7f1d12521ca11e18a5be15f32f794fad1a814485fb4e3c09ed2f5d910e0a5f1fb12ba6e53ad29e9c69d61aa79f72bface95df3fa5b267616584e6cf7eaf1d2
- SSDEEP 768:kohacoXI4CSdXN6ByImKksnQ3OdbgijE/v135qnkVkXKVl34qyiGV:HboXCSdXQB+KkrubE/v135qgB4qfGV
- TLSH
  T1F423D02EF505E02CC6F5857D94A643E7F24B8841D242AF1F3CA5FBC58A108CB1B1AD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  FM VN - LVCM2 - Directors' Resolutions (Manager) - KW draft 19.8.26(49213363.4).docx
- Size 30KB
- SHA256 b8ad39df192e0eac96a5f198b87caa7854d07126346e089715a0c3c7b8675974
- MD5 991020484e23cd5bb54514ded5a9d11c
- SHA1 7aa85ffe2acd2b963c5f12d2613c5b4a8e88fe04
- SHA512 39b56ce96860f907141b8ee414b4f0c561175a77fabf6e5385a219709494ceeb67a19c647c6077879ed3cb2cb6876214211c28512b69310c9c47ec73ebb6dcdd
- SSDEEP 768:Kn2P56GkZLBoG2bZVZav13KTdnbvqFmVcSoT:KWIlj2xav13KtbvymVeT
- TLSH
  T164E2CF2ED509B01FCA39197C949E01FAF706CD81E1847B0F5895F65CCAC169B27BB98C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  FM VN - LVCM2 - Directors' Resolutions (Sponsor Co-Investor) - KW draft 19.8.26(49213366.4).docx
- Size 31KB
- SHA256 bc330640276a3796562f3011f2bc7a4d0685f2f8ff23d3d395cf5c523243d29a
- MD5 b26107cbfb32f5ef2b318282aa578956
- SHA1 95e84baeccfa7729360799a69796a478ce88e5f0
- SHA512 74ca52972a026d1fbdfa1007c477691f98e1f2123f4f3581b7184615cde2ca2c263f5efeadd823a5af6b629b575c8a55ab670f55775ea541c5a39f8d0ac435c0
- SSDEEP 384:sd3to+rXFFZs81QHNMgd6pd3+fTYbn0i13LSnuX2ACFeuB2gdNkhm4jh3262+:m9oiXFR3gNEv13mnE2Hkhm4jF
- TLSH
  T1F5E2C02AD894E055C13E1EBCD81B48E6F2464588B255BB0F2889F38C5B48EDB3B175DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  FM VN - LVCM2 - Notice of Resolution (Adoption of New Constitution) - KW draft 19.8.26(49213373.4).docm
- Size 34KB
- SHA256 f5ece2ec67372483d8e5cee6c50cc42e10a0b8ebe4fac7b220d150c63a51903c
- MD5 2877ddfef672ab51d87c2411f8c46594
- SHA1 970c8937f49ccff141b31cd175eba16439ab7b3c
- SHA512 9cb7a83dc56e3f876dc44b9db7ac27edd12a497998c698cde3ed2dc125880c08348c599fe580df45404cb9b3c7ab84e89436624b1eba3b014580bad48f8bd6d8
- SSDEEP 768:3dh9u16zcVM6CreW6CJS4UiFqSqbS6xGGLZPK3Yd1i1+QSYlnklx:NLAG64eWXlU3m6DLZPKofi1zsx
- TLSH
  T19EF2D02CCC813475C2B2DA7CE506B443D105A9C3B575538B254AB2C81A2E8EF1F6F6ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  FM VN - LVCM2 - Notice of Resolution (Authority to Issue Shares) - KW draft 19.8.26(49213374.4).docm
- Size 38KB
- SHA256 19a8f4047eb73f29e78b77aac3009c7db979681c39604dd8353d7da9d0529aeb
- MD5 fb6ea7693da46fb5137863df76495c0b
- SHA1 0e512500a4a10b517f969555c2cdebabd8791197
- SHA512 efba6b5664ed676e23f0fea52a5a466964483ed05334a4ffdcc287c6c0403d6642d9e63a76cd29ca321ec410f29f46dcd30063b042a5bf021e4518fc32f0a4b7
- SSDEEP 768:lmT/qJ1sfQroWXNC0OxjNkcV/SYTZUX9jNlWiYd1itKlBmZwG7:YS/NkWXuZkQ2Rujfi4BKwG7
- TLSH
  T1F803E139E8613858C1A395FCA81F8952BB116B53F3EA133BA544F7CE854588B03B5BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  FM VN - LVCM2 - Shareholders' Resolutions (Company) - KW draft 19.8.26(49213325.4).docx
- Size 38KB
- SHA256 1e8be79358ccd9367ceb9b14c0d3a3c04a94679a921a838de951ffdab7bc9c77
- MD5 ddf579a466ed696b7be022e974574926
- SHA1 8d3414d75c8de63bb3e0c2edfd74b6f854d5e9e2
- SHA512 d976d4dd03e7ac6729ddf17c5d6efae03c761b3c0e51dd8b223892e06b72336cde82486c9d90fa7fb802c36f86079406053aac8ee9959ca190b8705238df4b97
- SSDEEP 768:PMuE1K6iiN2dV2RZB0OaIFTS1z02v139fS/gWPJ6D4vaSO:PTE1eioKGOk1z02v13FD4vaz
- TLSH
  T1D603CEADE68DF4BDC46E127D020D04C9E516C602C6DEEA1B3051F5CE6A011DF9B3EA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14