General
- Target 90fe3336-164e-d56e-e077-903c307de8d5.eml
- Size 13KB
- Sample260907-phex3awfpd
- SHA256 ddc7ac1ea3cb3856b08c589ed170df23f50af9b42e0679ac63e05c9c6a5525f1
- MD5 2003e66a8fa73a23aa137d115c9ea002
- SHA1 4fce4a15db986bb7556728c95c95c58e9fc358be
- SHA512 1d9a5c723033d01b9b614e7c89e235051c745e6bba3dbc00c42386e12531fecf202f986dc59f1126f529501f773b9e5e40b0b236d42bb1d8cf33b87ca59fe17c
- SSDEEP 192:XwPMkxSMZ49N/SZYicAMx4d/9efZvqN+QOVtzgmGeR8:XwP1xSlNYvcDx2/EfZ4nOVtzK
- TLSH T1E452D5A042130C86DB72519888206E0C9621FE96F67F8491795F77BB1BCF07EBF26D94
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
90fe3336-164e-d56e-e077-903c307de8d5.eml
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
90fe3336-164e-d56e-e077-903c307de8d5.eml
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
email-html-1.html
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral4
Sample
email-html-1.html
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 90fe3336-164e-d56e-e077-903c307de8d5.eml
- Size 13KB
- SHA256 ddc7ac1ea3cb3856b08c589ed170df23f50af9b42e0679ac63e05c9c6a5525f1
- MD5 2003e66a8fa73a23aa137d115c9ea002
- SHA1 4fce4a15db986bb7556728c95c95c58e9fc358be
- SHA512 1d9a5c723033d01b9b614e7c89e235051c745e6bba3dbc00c42386e12531fecf202f986dc59f1126f529501f773b9e5e40b0b236d42bb1d8cf33b87ca59fe17c
- SSDEEP 192:XwPMkxSMZ49N/SZYicAMx4d/9efZvqN+QOVtzgmGeR8:XwP1xSlNYvcDx2/EfZ4nOVtzK
- TLSH T1E452D5A042130C86DB72519888206E0C9621FE96F67F8491795F77BB1BCF07EBF26D94
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target email-html-1.txt
- Size 2KB
- SHA256 f0c6f18adc49c8ef519f9b2f7b4dde083b1cf95aadbd36c786b4cf7dd8715edc
- MD5 7750f5e719f182f46a2e982f9386cc04
- SHA1 25f2a6f517cd48ac8b2e111a3f0aa8e8aed08741
- SHA512 08677c9776cb8ff35fdc294ed9d86785e476a85c94577c71f941b832d2d1742a96c0932b257a049e304054a11b7c1905955672651afde36bac1a0475dbcc1152
- TLSH T16D514F42C2422C0DA13741B8D431A794CB068295E7534A90B79F77B3FBC99A0EBA36CD
- MD5 SHA1 SHA512 TLSH
Score3/10