Overview
overview
7Static
static
5COPIA_DE_T...ra.eml
windows10-2004-x64
7COPIA_DE_T...ra.eml
windows11-ltsc_2024-x64
1COPIA_DE_T..._b.svg
windows10-2004-x64
3COPIA_DE_T..._b.svg
windows11-ltsc_2024-x64
3email-html-2.txt
windows10-2004-x64
1email-html-2.txt
windows11-ltsc_2024-x64
1email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
1General
- Target COPIA_DE_TRANSACCION_EKNFW5CD.svg_b mira.eml
- Size 126KB
- Sample260913-cfw3cassds
- SHA256 6a15d6fdddb67a205859c62a8b3f6303cd7064ce2319a1bb7ed4f44f7e2e658b
- MD5 603d1f8a5e81328d938332f0c9a6c064
- SHA1 0fcf89dfaff1d1533a7adc8be9bbe3308518edba
- SHA512 a90325ebb9a44b1dd78bc1188c21546237aa77f844e7433a02a663b20dfbac23ddbe44ea7b044873469950890656d75946ba75be9d7889fcfbb9877d35e145b4
- SSDEEP 1536:ezWiBeciGrVW6iTUnSORnDoL6Zzzt22mrsdzGAvIL+x2s2a0HTUKugXi+H8r/b:ey8iGrBnjqe2lrk2sVAUQXJU
- TLSH T1C9C3D89BD8432F8F920125B7A93C39F0A82982574D3CA0F23A75EBC753585ED79407B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
COPIA_DE_TRANSACCION_EKNFW5CD.svg_b mira.eml
Resource
win10v2004-20260911-es
Behavioral task
behavioral2
Sample
COPIA_DE_TRANSACCION_EKNFW5CD.svg_b mira.eml
Resource
win11ltsc2024-20260911-es
Behavioral task
behavioral3
Sample
COPIA_DE_TRANSACCION_EKNFW5CD.svg_b.svg
Resource
win10v2004-20260911-es
Behavioral task
behavioral4
Sample
COPIA_DE_TRANSACCION_EKNFW5CD.svg_b.svg
Resource
win11ltsc2024-20260911-es
Behavioral task
behavioral5
Sample
email-html-2.txt
Resource
win10v2004-20260911-es
Behavioral task
behavioral6
Sample
email-html-2.txt
Resource
win11ltsc2024-20260911-es
Behavioral task
behavioral7
Sample
email-plain-1.txt
Resource
win10v2004-20260911-es
Behavioral task
behavioral8
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260911-es
Malware Config
Targets
-
- Target COPIA_DE_TRANSACCION_EKNFW5CD.svg_b mira.eml
- Size 126KB
- SHA256 6a15d6fdddb67a205859c62a8b3f6303cd7064ce2319a1bb7ed4f44f7e2e658b
- MD5 603d1f8a5e81328d938332f0c9a6c064
- SHA1 0fcf89dfaff1d1533a7adc8be9bbe3308518edba
- SHA512 a90325ebb9a44b1dd78bc1188c21546237aa77f844e7433a02a663b20dfbac23ddbe44ea7b044873469950890656d75946ba75be9d7889fcfbb9877d35e145b4
- SSDEEP 1536:ezWiBeciGrVW6iTUnSORnDoL6Zzzt22mrsdzGAvIL+x2s2a0HTUKugXi+H8r/b:ey8iGrBnjqe2lrk2sVAUQXJU
- TLSH T1C9C3D89BD8432F8F920125B7A93C39F0A82982574D3CA0F23A75EBC753585ED79407B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target COPIA_DE_TRANSACCION_EKNFW5CD.svg_b.svg
- Size 86KB
- SHA256 daaba73b06af94eac63f0b10610956e1b83ac32d9e9c2991f2f9200607e75bcd
- MD5 215f26a3d3eca6d9fb5cd1800b0647df
- SHA1 727ef908693a56e51c27e6d5ab38163c46e48b9d
- SHA512 f938c62e52d554a9cffe6078377558530ebb3a095ed0a734f8bad6b03aa4214f0859763f1e3eacd78095fa2185f1eb28df09aa91cad2fb1c15e1c394ec9af076
- SSDEEP 768:RwAkaEBqF3bV6crB200JkfcvGjHGCUNhQpN0mxye/2SJBLTdqbsgjz50ByCNOda:REaEBqFsQkv4HcNO0m8SzBqbzitNO8
- TLSH T19083FF78B3DD4858D631C68CAF9EFFA2A85750CA07348284F44272139F62D97B9BB174
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target email-html-2.txt
- Size 293B
- SHA256 09a03b584a40d94fe544c44b8ea8088d60f7fb29ce904574d631a5d49dd521f1
- MD5 053432c2a26c672d236d817e809b7a65
- SHA1 0fad234eb566cd72cb17924bfb20083938157508
- SHA512 086a9e77f88be8a2087ae98b1900e67f10665f4581e16a8df793456659a95c6c1a49eda786be6b801d1cb406546bb415676522a9a1c31abd37a5b47704accda1
- TLSH T1E1E0C2600440500980170E3EB2B21F6F5357FB0D4A737A60075EE3E24FF6A58BD4A8CE
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target email-plain-1.txt
- Size 6B
- SHA256 7341d51eb1cc72392bf38c96a156af9fbf9ef5add150b5e0ca5e723d0f668e45
- MD5 1e5ed0f4e3567370469ec5b37ddd08e1
- SHA1 af77afef6e5151b8b51fe1513de3c27af5460bd7
- SHA512 02191ea212f3d19684e414cb30832ec0ad6b18cbe65a93e2fef77b4237a98e79089e626902c892ed58c7cc29c1dab688de772415fceccbf87556956e740c01f6
- MD5 SHA1 SHA512
Score1/10