Overview

overview

6

Static

static

1

Message.eml

windows10-2004-x64

6

Message.eml

windows11-ltsc_2024-x64

6

message_v2.rpmsg

windows10-2004-x64

3

message_v2.rpmsg

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Message.eml
  • Size 2.0MB
  • Sample260922-vc8abaag89
  • SHA256 437a7dc6185409c84ef8ce18456a2f2d5c1b99ca78a113fe2bde92cd7426b169
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwareexecutionspyware

Malware Config

Targets

    • Target
      Message.eml
    • Size 2.0MB
    • SHA256 437a7dc6185409c84ef8ce18456a2f2d5c1b99ca78a113fe2bde92cd7426b169
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    adwarespyware

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2
    • Target
      message_v2.rpmsg
    • Size 1.5MB
    • SHA256 35eb45da728a4caffb70ee465913d672045e7d5afd47155dc48d064bcfdc148c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks