General

  • Target
    Suspected Spoofing phishing emails.eml
  • Size 6.2MB
  • Sample260828-xss7fasshs
  • SHA256 0fb279022a6244d9079effa67599ae46b394d1a52c34664bd1de4900f034deaa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Suspected Spoofing phishing emails.eml
    • Size 6.2MB
    • SHA256 0fb279022a6244d9079effa67599ae46b394d1a52c34664bd1de4900f034deaa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Email headers.rar
    • Size 7KB
    • SHA256 e754e6fa707b79c909ebf65d3845aa315778a82cb35717d96057bd6d16f5f5b7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Email headers/email headers.txt
    • Size 3KB
    • SHA256 338d033f26e3034b9868e1dab884ca1f402bdc35fabd04069c47b1a0ce785e01
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      Email headers/email headers1.txt
    • Size 2KB
    • SHA256 920201242eefd853e0a1431bb9f279f4fd19e32a8ade2fa859ad7062b432123f
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Email headers/email headers2.txt
    • Size 2KB
    • SHA256 c527915f7bb77bb20fa44455b3007c7a02d3b0a694ae055ef7b75d68d51997aa
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Email headers/email headers3.txt
    • Size 2KB
    • SHA256 39a4af75e67f5287e4e1c99e5dfba530a1fd1b6133951e0977f1e09fd4bc21be
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      Email headers/email headers4.txt
    • Size 2KB
    • SHA256 6ced49917a9f8ebbc06d5d416a0b980f76fbceecbc9adea3585e66a852cc8101
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Email headers/email headers5.txt
    • Size 2KB
    • SHA256 43174316ffb1b2a57129af3d5feafe1991a581ed28cbe37f3ff1a5c615b49500
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Email headers/email headers6.txt
    • Size 2KB
    • SHA256 fa9203035aaebae3d65f744d7888ac78326506f0c3970bdbb6193bb94d518629
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      Fw EMAIL ACCOUNT SUSPENSION NOTICE.
    • Size 15KB
    • SHA256 e643f735fa297c5415a14e6dff432755019f5f6b941f7b1aee71830da65618fc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      email-html-2.txt
    • Size 11KB
    • SHA256 19daa86f0833c15b649a637e6c4a55af607bfadf20c8a474b9f5584e6c1136f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      email-plain-1.txt
    • Size 858B
    • SHA256 e846987e35677f1962f4f34494cc3d8ab1434a3b9d20920319e4f1da002a2035
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      Fw Email Policy Update – Review Required #5338208405
    • Size 4.7MB
    • SHA256 4807c6f2b38d3b2200c81c7dc8221da399e62439d5f0473b2611eb734a3653eb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Email_Policy_Update#82992270603767644767.xls.html
    • Size 3.4MB
    • SHA256 77c6be7875a2421ba644bf32d39f62ea3ac31a3d1d89e699d1bb085746607368
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      email-html-2.txt
    • Size 3KB
    • SHA256 270e94968842f9ce60221cbbc8367b1bccf427b5c33acfd4fbbdb2fa65bcca42
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      email-plain-1.txt
    • Size 1KB
    • SHA256 3d0c04a5309cbd5369ae6b236f28bd14eb511d10afd046a9ceae243d5de3af63
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

adwarespyware
Score
1/10

behavioral2

adwarepersistenceransomwarespyware
Score
8/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

adwarespyware
Score
1/10

behavioral6

adwarespyware
Score
1/10

behavioral7

adwarespyware
Score
1/10

behavioral8

adwarepersistenceransomwarespyware
Score
8/10

behavioral9

adwarespyware
Score
1/10

behavioral10

adwarepersistenceransomwarespyware
Score
8/10

behavioral11

adwarespyware
Score
1/10

behavioral12

adwarespyware
Score
1/10

behavioral13

adwarespyware
Score
1/10

behavioral14

adwarepersistenceransomwarespyware
Score
8/10

behavioral15

adwarespyware
Score
1/10

behavioral16

adwarepersistenceransomwarespyware
Score
8/10

behavioral17

adwarespyware
Score
1/10

behavioral18

adwarespyware
Score
1/10

behavioral19

adwarespyware
Score
1/10

behavioral20

adwarepersistenceransomwarespyware
Score
8/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

adwarespyware
Score
1/10

behavioral26

adwarepersistenceransomwarespyware
Score
8/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

Score
1/10

behavioral32

Score
1/10