General
- Target 20260824-001548_Barrow-Engineering-Pty-Ltd---RFQ-Upcoming-Mechanical-Project-Requirements.eml.eml
- Size 108KB
- Sample260824-b4nv7ssbjd
- SHA256 4bedaa7bc9f9298d91aa461c39f1f6f58035de3a090eb16bd1238c96cc378f77
- MD5 45c3906b8701eab6e5f648d57cff02b1
- SHA1 18e6cf6935dfe9433ce3aae550cfac26415e4c63
- SHA512 7ccbaebae8b1109153fc8b57da347d3298a6146cb6dc7b139596edf7152c56ccf046b98fcf044b413f6c2ebb89acd6c055d3cf38070a07e55a000bfdd19358eb
- SSDEEP 3072:pGm1VCEeUSyPIFQmHly0xasQX0nwB7AMHhHUM6h+TRJXkXkYBvU:pGm1VreU9PImxX0nwB7RHhHUMqXkYlU
- TLSH T158B32AAB5FE119B19FB78753DC693903623424CE30B3649B48EFAFA0531C6C6A0557E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
20260824-001548_Barrow-Engineering-Pty-Ltd---RFQ-Upcoming-Mechanical-Project-Requirements.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
email-html-2.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 20260824-001548_Barrow-Engineering-Pty-Ltd---RFQ-Upcoming-Mechanical-Project-Requirements.eml.eml
- Size 108KB
- SHA256 4bedaa7bc9f9298d91aa461c39f1f6f58035de3a090eb16bd1238c96cc378f77
- MD5 45c3906b8701eab6e5f648d57cff02b1
- SHA1 18e6cf6935dfe9433ce3aae550cfac26415e4c63
- SHA512 7ccbaebae8b1109153fc8b57da347d3298a6146cb6dc7b139596edf7152c56ccf046b98fcf044b413f6c2ebb89acd6c055d3cf38070a07e55a000bfdd19358eb
- SSDEEP 3072:pGm1VCEeUSyPIFQmHly0xasQX0nwB7AMHhHUM6h+TRJXkXkYBvU:pGm1VreU9PImxX0nwB7RHhHUMqXkYlU
- TLSH T158B32AAB5FE119B19FB78753DC693903623424CE30B3649B48EFAFA0531C6C6A0557E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-2.txt
- Size 59KB
- SHA256 5d11bd74cb6a3225e1eb4f30074ebe3dd224e3631b5a151c237e57650d50ea7a
- MD5 86adaf10c47e9c1574446ac005c4ac9b
- SHA1 a1b9e3eaa8f4357530f33e7d26c24b233b508fe0
- SHA512 5016a6b38c2181976c4a55f6441520fd70a376da0c1a8e52245f19b533300922dfcd2eead9a435c76d8ae29b2acfb50db784c064417dc49cfbdce571b6f2daeb
- SSDEEP 1536:tIXuBxSRDP0B8kGpvboWoCodo6iSdyTySTaTUvlNoq:tIXuBxSRDPf+2
- TLSH T11D436648F4149D2723F76299BE35E4F468AB1368C848119BE4E4F36938CBCB5C353A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target email-plain-1.txt
- Size 2KB
- SHA256 ddbffb59327b8390704105a3907a847a9eeab186ca9cd8a30bb26c2215e20eb8
- MD5 29ad77ec1d0c00477f93e44316389172
- SHA1 7333f4c59a51705568cf52acbde93f9a084efd73
- SHA512 e6bb1ca2267cf051b2a76e6d203f7d7563a75b508058320d2ab57f20cb1c13cc60b57a9c9a187ecc90c632c08388ef67ce0ce00afad0dbf17a647ccf0fd80c44
- TLSH T18B4154EBD3D22371190201B1BA423485FB5E44B927AB75C2B599814C73A6D85C3362A8
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.