General
- Target Requerimiento DIAN_ Sanción RADICADO VIRTUALIB 6726958334865.eml
- Size 70KB
- Sample260906-vz855adr4s
- SHA256 59949518ce1f1cf0f76c0447f7266e30d4fd8e616c4f7cbea1adc9ed7bd3b245
- MD5 d59f0f3b55561ecc5e683a7445e4dafb
- SHA1 6b8c9db26ae0883f48de00f46019c3cf4747d352
- SHA512 682360bcc931012f3ad1ff10513a00b93ee656e0e07f8043aabf8f32578315342506c6145280e4f399e8e869407afa96d06b0211257df4da3198815d3a32c8e1
- SSDEEP 1536:YOQx87xkBhcRKKrytbAw5rbHAqh76mpxxz9idC0F9dxhYu:YO0akwVTWxiFzYu
- TLSH T1CD638E30C7711E16C6A355E8BC027ACDBE690FABD27B94F234A76663588D0D0C35A399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Requerimiento DIAN_ Sanción RADICADO VIRTUALIB 6726958334865.eml
Resource
win10v2004-20260513-en
19 signatures
900 seconds
Behavioral task
behavioral2
Sample
Requerimiento DIAN_ Sanción RADICADO VIRTUALIB 6726958334865.eml
Resource
win11ltsc2024-20260709-en
18 signatures
900 seconds
Behavioral task
behavioral3
Sample
Sancion8845347889733693595798343983339.rar
Resource
win10v2004-20260513-en
2 signatures
900 seconds
Behavioral task
behavioral4
Sample
Sancion8845347889733693595798343983339.rar
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target Requerimiento DIAN_ Sanción RADICADO VIRTUALIB 6726958334865.eml
- Size 70KB
- SHA256 59949518ce1f1cf0f76c0447f7266e30d4fd8e616c4f7cbea1adc9ed7bd3b245
- MD5 d59f0f3b55561ecc5e683a7445e4dafb
- SHA1 6b8c9db26ae0883f48de00f46019c3cf4747d352
- SHA512 682360bcc931012f3ad1ff10513a00b93ee656e0e07f8043aabf8f32578315342506c6145280e4f399e8e869407afa96d06b0211257df4da3198815d3a32c8e1
- SSDEEP 1536:YOQx87xkBhcRKKrytbAw5rbHAqh76mpxxz9idC0F9dxhYu:YO0akwVTWxiFzYu
- TLSH T1CD638E30C7711E16C6A355E8BC027ACDBE690FABD27B94F234A76663588D0D0C35A399
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
- Target Sancion8845347889733693595798343983339.7z
- Size 10KB
- SHA256 96fba90a5cfbfed386e12d485822e1609d76e86bd8681a75fcdbcdd45b5e0bd8
- MD5 c4db4721957b98eb97f7a86cfe49dc02
- SHA1 bdb7695a414c8978bd11927198367814e4cda0e5
- SHA512 40212e17cd1d41687ef08bcda70881d3623bbeb3ccd395b3dab7e7f3097121ee21371bb61e31281552c122b400ad5b6babbc73872377e7eb0ffef0a07fe76f2e
- SSDEEP 192:ZHeJzdVlkM9dF2gcz6k1NDsH4b60LqRNKppaFVZZI41YHQePg839THaZb9ATUoEo:QJzXn7F2gcz6k1b6zNKGbbI9QeP39eP8
- TLSH T18532B0A6714717EA75BD380C7C9B8F128B4096A54740E2EFC93F45DA9C6BCC392DA540
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.