bf4f919ec80673e2fd1dfa768433838af0bb9a4b1c09e8000d6b22d633e7fc25

Sharing

Copy URL Twitter E-mail

General

Target
CIV-2026-044-000531 – Paris NZ Ltd v Clayton – Supplementary Evidence.eml
Size 59KB
Sample260821-e1wnessgkd
SHA256 bf4f919ec80673e2fd1dfa768433838af0bb9a4b1c09e8000d6b22d633e7fc25
MD5 87cb0572d34fcd08e01e080276ab0c0e
SHA1 39b863348d6d3114423d2cfe9d196b15ef6a04e1
SHA512 c8459fced56670689f228419a3e96f7920540fc4394c98c55842347b5bc4760ed09677978e53cd392c9e4faea67aeadc95a5f1d744638850ed84ce01a4ea789c
SSDEEP 768:j3ymnmquVAevCkurlB4VHV97q3e0qQK7bdE0C3yd:jiAmqJkCkun4VHV9ynZgd/C3K
TLSH
T138536C67E806069301F685F4F05A2B41C0C5C55EE713AD90B67EA1EF3DCEB59236A3C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  CIV-2026-044-000531 – Paris NZ Ltd v Clayton – Supplementary Evidence.eml
- Size 59KB
- SHA256 bf4f919ec80673e2fd1dfa768433838af0bb9a4b1c09e8000d6b22d633e7fc25
- MD5 87cb0572d34fcd08e01e080276ab0c0e
- SHA1 39b863348d6d3114423d2cfe9d196b15ef6a04e1
- SHA512 c8459fced56670689f228419a3e96f7920540fc4394c98c55842347b5bc4760ed09677978e53cd392c9e4faea67aeadc95a5f1d744638850ed84ce01a4ea789c
- SSDEEP 768:j3ymnmquVAevCkurlB4VHV97q3e0qQK7bdE0C3yd:jiAmqJkCkun4VHV9ynZgd/C3K
- TLSH
  T138536C67E806069301F685F4F05A2B41C0C5C55EE713AD90B67EA1EF3DCEB59236A3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

adware spyware
behavioral1 behavioral2
- Target
  email-html-2.txt
- Size 17KB
- SHA256 ffa50cabb2543a82aa55206925816b217419f426e0ca0d6d72783d21def0cd5e
- MD5 2026139c545ef74469a2d7fe19a2e8aa
- SHA1 fc23034496e614afa1f03623f2195f9966deb501
- SHA512 09ed71602352dff2c51f593ac10f7a96d85669df8c9dd18f55c2a902c3619c27b59cfd26c527619a79f00aa53b944df1cc90693a42c12164a983db68de2e1cfa
- SSDEEP 384:bvIGb9699y9YpzAUUAwuFAYd599999UK9hBABuraaPioT6A8uGw5YpX6EKplF09W:bvKFqaNLz
- TLSH
  T107821263F9191E0784F642F8E06A3F40D0C5C25ED3163D94A768A9E778CEE692B153CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  email-plain-1.txt
- Size 4KB
- SHA256 e51163b7ebf3336c1acddec542ecb8becf72fc07ea6118091523bf6166d4827c
- MD5 8eb7318fadb9f4d7bfa1fe74e6ebffa5
- SHA1 7d72bc71d15d50d0022f76aaa94bd49ea772d434
- SHA512 6e93b7b040e373e387b92fb77f8ff2c2ebc06263c9417ecd30cdc012aa91c03b9820985bb9e9955471f4dfb7683c248d47ff5962b9b01284dab0ff9da6c46112
- SSDEEP 96:OgX75o8Z+rTRWDj/xnZkf5kVNXutecs+aFJV1PsVkX75o8Z+2:Og197z4f5kLeteKaFJVP19d
- TLSH
  T16EA176FB424F1363011244F5BDABBAD9EA89D07CFF971980746C819C1201D589B7B5EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  image001.jpg
- Size 1KB
- SHA256 b84ffd9ccb43cacc0e69e048ca72484f3b6d8d888003948d51de693c0514efcc
- MD5 c49a619ef88885fa3ec62a18ac89f457
- SHA1 0fa1ca732b94bff91ff3f84773c049cf93d9cfd6
- SHA512 cb7c3cd83fbd268fc32009b71d1248fc06434e6061d8157414a788c2295e6c337ac99e94201c4ffe56d3fde5043baa2c3a673314bb137f709391ef8fac633600
- TLSH
  T12241D72F5263A3209C665E6F6A0D1373F5CF3B957140364E18E05EC26110CA8B355E68
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  image002.png
- Size 20KB
- SHA256 02c42beeb0898d7b0b13c19c6cde2bccf8de871134f10c50976df8a09f1d4d9d
- MD5 4d71f403eca3cb33ec2900f58764593a
- SHA1 ab32e6f2ae1a777be2f5e6f0e30b0ce928cf2865
- SHA512 0bbe9791291e76be0c1983cf2bc62b52be140ca794fe68d5b8789af4ce67c1fab29771763dcc598a41dae3ef095bcf20fc1d6abb7e7f9c321aa6e45234c4da86
- SSDEEP 384:X2m77gqFFS6la8SdcZ7wMZ7eC5fBi5M3BVTbMrsSTDomOwSm2GzUr7bKHaI4/:XUqFFS6laBU3wC5fmMRVTbAsSvoE2Vb9
- TLSH
  T18B92D01BC0AB27CC33C5FA64906BE43A5C2425F97E54755C0399BAF1FE09CA19889A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9