General
- Target RE Facebook Data Breach.msg
- Size 219KB
- Sample260823-ez8llahc59
- SHA256 7369a922782072478277cd7d217b875c3167e37dc13a2b16d16efa16f403796e
- MD5 f1cdace160fcccb0b3d8a78c6c5acf5b
- SHA1 e39ba2bb350aa73860afb2b6cc58ae626f3ffa7c
- SHA512 eff8326a7f0332962403f8421909ca67ee64d925768207d72b90634fd503c0c35683a4c9ad79218e8e03d78f0e2cb9a7b8de04463e7bc0ec5b29a662eece2cfd
- SSDEEP 3072:6yogTwQKshBkoYoUYSwemUU0fFOcwRmRTTZ8+h5T0OJVPA:6bUHYFYLemUU0fFO1+TZ8+h5T0O
- TLSH T17824E71136A94705F27A9B760DE380979F22BD8DED90868F3293730F1571770A86DB2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
RE Facebook Data Breach.msg
Resource
win10v2004-20260513-en
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
RE Facebook Data Breach.msg
Resource
win11ltsc2024-20260710-en
18 signatures
900 seconds
Malware Config
Targets
-
- Target RE Facebook Data Breach.msg
- Size 219KB
- SHA256 7369a922782072478277cd7d217b875c3167e37dc13a2b16d16efa16f403796e
- MD5 f1cdace160fcccb0b3d8a78c6c5acf5b
- SHA1 e39ba2bb350aa73860afb2b6cc58ae626f3ffa7c
- SHA512 eff8326a7f0332962403f8421909ca67ee64d925768207d72b90634fd503c0c35683a4c9ad79218e8e03d78f0e2cb9a7b8de04463e7bc0ec5b29a662eece2cfd
- SSDEEP 3072:6yogTwQKshBkoYoUYSwemUU0fFOcwRmRTTZ8+h5T0OJVPA:6bUHYFYLemUU0fFO1+TZ8+h5T0O
- TLSH T17824E71136A94705F27A9B760DE380979F22BD8DED90868F3293730F1571770A86DB2E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
A potential corporate email address has been identified in the URL
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.