1f941b5becb60cc53921f8e969313ee2213569b26bd1aa1182f760d4e492548b

Sharing

Copy URL Twitter E-mail

General

Target
Invoice disputed by JC.pdf
Size 302KB
Sample260913-dln5cs1amb
SHA256 1f941b5becb60cc53921f8e969313ee2213569b26bd1aa1182f760d4e492548b
MD5 fd6db6fda96c23510a942166bfb71870
SHA1 bf78121f008f1d5df384852264347f40dd76665d
SHA512 b83afc2465cc044f42413392e1ed7e494bcc1f8eefb9b1fe980040f5d059cd9b9d331f762c835ca5bfb1dfc5873ce6351153e308bf987cdfff8a59199fa68212
SSDEEP 6144:R+NODnGAdwJp6QqqPp3gPmV3lZOXXCALiGstLTSZLIIjOpo7FYSp:R+EDnGn3qqPlcu1ZiCfGst3SZDOCN
TLSH
T1966412F59729489200C3D73693B902DE80D7D2AD82BC6B79757D8D821B80CC31DE5AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Invoice disputed by JC.pdf
- Size 302KB
- SHA256 1f941b5becb60cc53921f8e969313ee2213569b26bd1aa1182f760d4e492548b
- MD5 fd6db6fda96c23510a942166bfb71870
- SHA1 bf78121f008f1d5df384852264347f40dd76665d
- SHA512 b83afc2465cc044f42413392e1ed7e494bcc1f8eefb9b1fe980040f5d059cd9b9d331f762c835ca5bfb1dfc5873ce6351153e308bf987cdfff8a59199fa68212
- SSDEEP 6144:R+NODnGAdwJp6QqqPp3gPmV3lZOXXCALiGstLTSZLIIjOpo7FYSp:R+EDnGn3qqPlcu1ZiCfGst3SZDOCN
- TLSH
  T1966412F59729489200C3D73693B902DE80D7D2AD82BC6B79757D8D821B80CC31DE5AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware defense_evasion credential_access
- OS Credential Dumping
  Adversaries may attempt to dump credentials to use it in password cracking.
  credential_access
behavioral1 behavioral10 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9
- Target
  image001.jpg
- Size 1KB
- SHA256 b84ffd9ccb43cacc0e69e048ca72484f3b6d8d888003948d51de693c0514efcc
- MD5 c49a619ef88885fa3ec62a18ac89f457
- SHA1 0fa1ca732b94bff91ff3f84773c049cf93d9cfd6
- SHA512 cb7c3cd83fbd268fc32009b71d1248fc06434e6061d8157414a788c2295e6c337ac99e94201c4ffe56d3fde5043baa2c3a673314bb137f709391ef8fac633600
- TLSH
  T12241D72F5263A3209C665E6F6A0D1373F5CF3B957140364E18E05EC26110CA8B355E68
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral17 behavioral18 behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Modify Registry

T1112

Credential Access

OS Credential Dumping

T1003

/etc/passwd and /etc/shadow

T1003.008

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

OS Credential Dumping

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20