Overview
overview
8Static
static
1Suspected ...ls.eml
windows10-2004-x64
1Suspected ...ls.eml
windows11-ltsc_2024-x64
8Email headers.rar
windows10-2004-x64
1Email headers.rar
windows11-ltsc_2024-x64
1Email head...rs.eml
windows10-2004-x64
1Email head...rs.eml
windows11-ltsc_2024-x64
1Email head...s1.eml
windows10-2004-x64
1Email head...s1.eml
windows11-ltsc_2024-x64
8Email head...s2.eml
windows10-2004-x64
1Email head...s2.eml
windows11-ltsc_2024-x64
8Email head...s3.eml
windows10-2004-x64
1Email head...s3.eml
windows11-ltsc_2024-x64
1Email head...s4.eml
windows10-2004-x64
1Email head...s4.eml
windows11-ltsc_2024-x64
8Email head...s5.eml
windows10-2004-x64
1Email head...s5.eml
windows11-ltsc_2024-x64
8Email head...s6.eml
windows10-2004-x64
1Email head...s6.eml
windows11-ltsc_2024-x64
1Fw EMAIL A...CE.eml
windows10-2004-x64
1Fw EMAIL A...CE.eml
windows11-ltsc_2024-x64
8email-html-2.html
windows10-2004-x64
3email-html-2.html
windows11-ltsc_2024-x64
3email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
1Fw Email P...05.eml
windows10-2004-x64
1Fw Email P...05.eml
windows11-ltsc_2024-x64
8Email_Poli...s.html
windows10-2004-x64
3Email_Poli...s.html
windows11-ltsc_2024-x64
3email-html-2.html
windows10-2004-x64
3email-html-2.html
windows11-ltsc_2024-x64
3email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
1General
- Target Suspected Spoofing phishing emails.eml
- Size 6.2MB
- Sample260828-xss7fasshs
- SHA256 0fb279022a6244d9079effa67599ae46b394d1a52c34664bd1de4900f034deaa
- MD5 8c9b9fef1937eb642e3e4d493f53988e
- SHA1 cdc50760a009255e66b545c455e729e91168f417
- SHA512 9732061f0c6f7c2000972cd752e4db37692c3cddf0678b61e74ef07ccd524a89643d307a6f088b88365c3131400aa5e526818ca064ea3425746f84110fdadf73
- SSDEEP 24576:jiypIkOMcEaVMdtN5QuGJg2Jg9IF+chapdgSs5mvd+4b:RvJTfYvwuqn
- TLSH T13F664802FEA14997B453457A3CCB368F13F66D64A24CCE6620D35FB2F6964BB7207128
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Suspected Spoofing phishing emails.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Suspected Spoofing phishing emails.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Email headers.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Email headers.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Email headers/email headers.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Email headers/email headers.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Email headers/email headers1.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Email headers/email headers1.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Email headers/email headers2.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Email headers/email headers2.eml
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
Email headers/email headers3.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Email headers/email headers3.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Email headers/email headers4.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Email headers/email headers4.eml
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
Email headers/email headers5.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Email headers/email headers5.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Email headers/email headers6.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Email headers/email headers6.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Fw EMAIL ACCOUNT SUSPENSION NOTICE.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Fw EMAIL ACCOUNT SUSPENSION NOTICE.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
email-html-2.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
email-html-2.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
email-plain-1.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Fw Email Policy Update – Review Required #5338208405.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Fw Email Policy Update – Review Required #5338208405.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Email_Policy_Update#82992270603767644767.xls.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Email_Policy_Update#82992270603767644767.xls.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
email-html-2.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
email-html-2.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
email-plain-1.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Suspected Spoofing phishing emails.eml
- Size 6.2MB
- SHA256 0fb279022a6244d9079effa67599ae46b394d1a52c34664bd1de4900f034deaa
- MD5 8c9b9fef1937eb642e3e4d493f53988e
- SHA1 cdc50760a009255e66b545c455e729e91168f417
- SHA512 9732061f0c6f7c2000972cd752e4db37692c3cddf0678b61e74ef07ccd524a89643d307a6f088b88365c3131400aa5e526818ca064ea3425746f84110fdadf73
- SSDEEP 24576:jiypIkOMcEaVMdtN5QuGJg2Jg9IF+chapdgSs5mvd+4b:RvJTfYvwuqn
- TLSH T13F664802FEA14997B453457A3CCB368F13F66D64A24CCE6620D35FB2F6964BB7207128
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Email headers.rar
- Size 7KB
- SHA256 e754e6fa707b79c909ebf65d3845aa315778a82cb35717d96057bd6d16f5f5b7
- MD5 3b18a9cbeabd2a414f20ad573be24818
- SHA1 3a596ed0262ccc7c612acc77a9b069b0209bb67f
- SHA512 7fec26bbef62ec69b536f6c94e97a6eae252496a9eefe06eda6d9b21b2a3f2830ac235814af603f411c5cff43c78568c4dff162aa6c0d211d6c15b4cbf7bd629
- SSDEEP 192:GnpnHs4OnMaR/LyhK8yWxleQEitHg9cBHQau3HGU:GZMnRlNWrHg9cGN
- TLSH T186F19E0C949521C07F25A5A2385F5F56210F319F9688A8097BB9074DF4D4DFB7C9473B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Email headers/email headers.txt
- Size 3KB
- SHA256 338d033f26e3034b9868e1dab884ca1f402bdc35fabd04069c47b1a0ce785e01
- MD5 464a92a7e6aee82ccb84d1cfab37fb37
- SHA1 da180215e1a1fa9c563c4a50d30a132033f798f3
- SHA512 aa51d3cf486ebedcf31b41500bf098cd30f2a3c783c821b918e686dcb7a5422687e4f6e05afcd9a54c592c2bd815df0752730fed3373bb61fdc1e14c398e8a1c
- TLSH T1BE7155C2AAFF8139DEC6B2EA0D40250076E534CDC575F4C07DED409995AF19C839674B
- MD5 SHA1 SHA512 TLSH
-
- Target Email headers/email headers1.txt
- Size 2KB
- SHA256 920201242eefd853e0a1431bb9f279f4fd19e32a8ade2fa859ad7062b432123f
- MD5 ae3edb4fc3277f52bc24d6295629e2ba
- SHA1 525f955414276e6fd260902626698db1b9855d98
- SHA512 2d96028bc406e215649bbf522fe100a397a0d6949f1739dfae4c8d42de016eee3696206224199c1e40df6199c36a41aba9b1bd6de08cb7d8b37e587bcf4c1631
- TLSH T1F45165C295AF913DEDCAB6E92DC0250077F918DD8579B4C02EBC4086A0562EDC3D778B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Email headers/email headers2.txt
- Size 2KB
- SHA256 c527915f7bb77bb20fa44455b3007c7a02d3b0a694ae055ef7b75d68d51997aa
- MD5 4cbd8dc40ea1b35cd8d2d1d65e31dd23
- SHA1 6980378858e2fe9697d244f0a364325bd90f3966
- SHA512 fa1a8f5e1835356ae031a642583e8f3b570bd0a483b5b16adfbac46772deed4142d91e6c7f0b3acbef4d158c1f7b72793116a3be20c274f0349411dab9858156
- TLSH T1115134C3A56F822D6DCEF6E56EC025006BFA18D98575F4C06E780086549B1ACC3E3787
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Email headers/email headers3.txt
- Size 2KB
- SHA256 39a4af75e67f5287e4e1c99e5dfba530a1fd1b6133951e0977f1e09fd4bc21be
- MD5 a0990e7f36e44165ab5f640ce4868d74
- SHA1 c4e2a384ac6b1ad9ebc29338e452a9b5eac3e372
- SHA512 c75160a817fc3de757f93b50eed6925d7c2710270b74758b32e402a67398a127360574bd9a6d04a84b7333bd73efacd14292a688a70cd7f6623eb00ba271d20e
- TLSH T18C5134C2A5AF823DADCFF2E96EC025006BFA58D98575B4C06E7800C5509B19DD3E374B
- MD5 SHA1 SHA512 TLSH
-
- Target Email headers/email headers4.txt
- Size 2KB
- SHA256 6ced49917a9f8ebbc06d5d416a0b980f76fbceecbc9adea3585e66a852cc8101
- MD5 87974a5f466bfb0ab69815ca2d5748ab
- SHA1 01ad3cc8faf82341314b5bc6690cc4772249e327
- SHA512 050f9ca0b5e8848f849db921208325cbc9f54e5aa4076e56c5150841c0b5360c2184fdbda6147f049b7ea9d05915972a60cd3aef38e3efdfbdbcbcbf43f668c8
- TLSH T1EB5142C2596F42296DCDF7F56EC019006BF628D9C53EF4C02AB801C7565B19C93E7647
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Email headers/email headers5.txt
- Size 2KB
- SHA256 43174316ffb1b2a57129af3d5feafe1991a581ed28cbe37f3ff1a5c615b49500
- MD5 19ba1ec13d4e50e07df6ce627155f53f
- SHA1 d7408fc104dca30d8575602f57eb888257dbc6e0
- SHA512 fbc455eb50904922511314ac0e704e2ed7fe2b25f6f2b120d80eb07d90f3da8cb390afd43ebc5f16f49efca3d3264ab7b946ca723ae2176d460340b4f5544c55
- TLSH T1805166C296AF81399ECEF6E52EC025002BF918DD8575F4C06E780595909B2ADD3D378F
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Email headers/email headers6.txt
- Size 2KB
- SHA256 fa9203035aaebae3d65f744d7888ac78326506f0c3970bdbb6193bb94d518629
- MD5 7ffe810e1626eb1725844f4495047433
- SHA1 7e6340f9e528bbd65be270484c3ae3475336cfde
- SHA512 4d47f60f746548337cc081e09fa49cce7d19ca023c3d892b3eb9962b5421a8a38a47851e2485e566f8948f2ca198e85b0af76fac6cc82e7cb91c7f4c242b6af2
- TLSH T14D5178C7A4BB8125ADC9B6E52D8015006BF134D6D93DF0C05AFC018A969B26D53A768B
- MD5 SHA1 SHA512 TLSH
-
- Target Fw EMAIL ACCOUNT SUSPENSION NOTICE.
- Size 15KB
- SHA256 e643f735fa297c5415a14e6dff432755019f5f6b941f7b1aee71830da65618fc
- MD5 87c4f74a5041bd3f5e775cbc91cc98ff
- SHA1 67632cf143a8c7bb3571d03f826201176524eaea
- SHA512 dd85a56699e6c641f48e1d1232dbab17bf30b28bd1291106b7986565073ba6212cb1bd2e23ff7592aa9d4f0407e4f3fcb2c8d62687f01934f7c4dab6ac2e3caf
- SSDEEP 192:UEq+IHc37ZJP5lvyq8k68+1W8878rrtsc37MuQs/Z8Bc3dnQ/8bc3n64WFfAwrg8:UEHIHsZEZvb4O
- TLSH T19D626006E7D95A0122764D257C8B3A6C742C0F9F8B028EB9AC3275B7CD5D1EF2396308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-2.txt
- Size 11KB
- SHA256 19daa86f0833c15b649a637e6c4a55af607bfadf20c8a474b9f5584e6c1136f2
- MD5 a5ff649642e15d0c4d603ae58e401dd3
- SHA1 79fd439f96af7845653428d67e272da458388a9e
- SHA512 611b7f3a5a74bc64b98534e93a2b2ba361ff9ee607c51f9a6807e6969290a2dc3265364cb426770e43a17f51bdfa91dc659da80793d2609ec3420d2fed3948e8
- SSDEEP 192:gTyn8uTVpar/IeIgxsFCtwohVomI2CtuYozIWCtUIJIqoxYoowoYo0YoSIJILy:TjPfy
- TLSH T19F32BB02E7E86E0062724D15788F76BD242C0B9F8B424E79EE227577C94D5FF2396718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target email-plain-1.txt
- Size 858B
- SHA256 e846987e35677f1962f4f34494cc3d8ab1434a3b9d20920319e4f1da002a2035
- MD5 c99a66329956bb6aa7eb353545321ae6
- SHA1 80d8970efe6c6ce5ee573587d99bab8a6115b9c2
- SHA512 e22ebaab08b2a711cb55c098ea433dd7d6b02feea13622b9039f3313a47bd37c75c96334ab65bc88d82bd7bf07e14f2792330ab5af9515e7bdeef0182e876602
- TLSH T15311AB1E4A8770960BA9F8F1BCF3E80CF2B1A0B5D8889A153CB0426C130491D7B2C52F
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Fw Email Policy Update – Review Required #5338208405
- Size 4.7MB
- SHA256 4807c6f2b38d3b2200c81c7dc8221da399e62439d5f0473b2611eb734a3653eb
- MD5 e083732a4108110e32400346b285273e
- SHA1 d23c7254592f9540978cd745428600edc032a05d
- SHA512 1a135b58d3758d9337fb263b6b28b2833923949cf647abdcd012bc612b40a9e65773d13ae62ea509f7f58029ec8c9f8c73f5ff017cecc73651cfa210c0f3ae69
- SSDEEP 192:WEkhykK5fjLU+5rRCyzN+vfnkem/mVV0oPxLTOsuXFgEePoAq4CNIk:WEtkqbLUcRCypk8emI3NagEePnqGk
- TLSH T14F360196FEC9198AB94681283DDFB64F43F20E14369CDE1405C31FB4B3961AB709396E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Email_Policy_Update#82992270603767644767.xls.html
- Size 3.4MB
- SHA256 77c6be7875a2421ba644bf32d39f62ea3ac31a3d1d89e699d1bb085746607368
- MD5 b3532596bf06511732cc6160684474c5
- SHA1 0e1eb94a5f4e3c005cc83b603ef19bb746bed9d3
- SHA512 19a7046f9616430f5ac2704fb9f38e6ec06c8cd2f40bd8d3d10142766840b9c5ccd6ea8724ffcdaace2f5431cf0af61fdc104897a67df3230e9e4acc1afaa13a
- SSDEEP 768:qbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbX:Q
- TLSH T1E5F521F553BB1E6E8C735641CD39AD0C88F94CB20A5EE0AEAD733584CE692E11B9435C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target email-html-2.txt
- Size 3KB
- SHA256 270e94968842f9ce60221cbbc8367b1bccf427b5c33acfd4fbbdb2fa65bcca42
- MD5 17ad7a6b6fe2473ddc71b122afd80908
- SHA1 47fbbd743aadcff0a1699ba2ef0a59795f9afb10
- SHA512 fe4e69e90e57b1752e3897ca7dfb0a295ae86563cc09213d2c0253f79810e648378a54d6b87bc5cc10843a14149bfd83b4a96866ba8eeba299a07e62b5f17a92
- TLSH T1896183A283406D2D29FBC176F111E79DE3DA3159632509A8CD65207BB2C85384F7B3EC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target email-plain-1.txt
- Size 1KB
- SHA256 3d0c04a5309cbd5369ae6b236f28bd14eb511d10afd046a9ceae243d5de3af63
- MD5 3d5ef7080081d1956487cd0d38dcc6b0
- SHA1 8f02d6b367ede2ebe53ee8f8e98541c1099e6976
- SHA512 d48e3aa7045642060b98ccd6c00ba6ca88ed9addfda24f8ba450f7bd75f86ddc8e9cea000deb7fe9c6e2b1c6cc79efe588a4726098a9ed2d70291f93a9821c94
- TLSH T1832123352257A1542A9750F37F019169E66B318C6A1C1054BE98029C93E6D2C2F3F2AD
- MD5 SHA1 SHA512 TLSH
Score1/10