Overview
overview
8Static
static
3df77e8ea-a...c0.eml
windows10-2004-x64
7df77e8ea-a...c0.eml
windows11-ltsc_2024-x64
8IFC Daily ...26.pdf
windows10-2004-x64
4IFC Daily ...26.pdf
windows11-ltsc_2024-x64
8email-html-2.txt
windows10-2004-x64
1email-html-2.txt
windows11-ltsc_2024-x64
1email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
1General
- Target df77e8ea-a5a9-5ea7-d0a4-6798b438aec0.eml
- Size 1.2MB
- Sample260925-knfpbstw4n
- SHA256 cddabc53e4c8b7e84217af792d2673259deaf274cb73c9194ddeeec99d86d742
- MD5 8bf45a99c62e407d49cf5181f7af8b99
- SHA1 974684807e59c19b36e97f478d4c39f826e51004
- SHA512 68ab8a6345e91c6e8982fdebd615c13ced37a2cda1cd75dcb7121da6bc5f8638b4ee090bc4c5358441e10eb5de56650fb163f4a438390217a7e7e1f255e2836e
- SSDEEP 12288:JtkU1dQdW3RIB+alT09/ehqv8qASm8Y2/ZbE7AIAiRjlQGOK7bqbDuUUMCPUniIL:8m3RIBTlT0gMUaqAkxQGJanuUoAiJk3
- TLSH T14245F123FC021CA6A32142AFB36FF8C4287B3E1E0C535DEAF53A611591B87575254EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
df77e8ea-a5a9-5ea7-d0a4-6798b438aec0.eml
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
df77e8ea-a5a9-5ea7-d0a4-6798b438aec0.eml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
IFC Daily Incidents & Press Summary 25 Sep 26.pdf
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
IFC Daily Incidents & Press Summary 25 Sep 26.pdf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
email-html-2.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
email-html-2.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
email-plain-1.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target df77e8ea-a5a9-5ea7-d0a4-6798b438aec0.eml
- Size 1.2MB
- SHA256 cddabc53e4c8b7e84217af792d2673259deaf274cb73c9194ddeeec99d86d742
- MD5 8bf45a99c62e407d49cf5181f7af8b99
- SHA1 974684807e59c19b36e97f478d4c39f826e51004
- SHA512 68ab8a6345e91c6e8982fdebd615c13ced37a2cda1cd75dcb7121da6bc5f8638b4ee090bc4c5358441e10eb5de56650fb163f4a438390217a7e7e1f255e2836e
- SSDEEP 12288:JtkU1dQdW3RIB+alT09/ehqv8qASm8Y2/ZbE7AIAiRjlQGOK7bqbDuUUMCPUniIL:8m3RIBTlT0gMUaqAkxQGJanuUoAiJk3
- TLSH T14245F123FC021CA6A32142AFB36FF8C4287B3E1E0C535DEAF53A611591B87575254EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target IFC Daily Incidents & Press Summary 25 Sep 26.pdf
- Size 831KB
- SHA256 6cbeb63364a57fe8a84e76ad832121b8e35b169d6f905ae3bd82ec5ec364e04c
- MD5 c52539b0481a78185d757b94db133bb2
- SHA1 a15c08e9b20fa7934ef56e9202098161606d2d9c
- SHA512 31666ca77a922c06343bf9a2acd29662bd6f06285502815f2e3cb65f75963419d2a172ece7084c92bd6aded97afec6280f01a8d968f256984ea7f4c2aee92021
- SSDEEP 24576:q+IjlhsqUQYMnpUNbD8ZmHPaifXMsBLPpv:8hsrGnpUNd8sBLPN
- TLSH T12E05CF2442242DCAE18587D47F0A3D1B6C8FB063D4CB96A5327EC29B4B54F996413FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-html-2.txt
- Size 23KB
- SHA256 d30a9af8b05bf6dffd24075df44277484875ec7456ac0a4be44b4ad08946f2a1
- MD5 ae344eb685b6eac179c1c22bab949648
- SHA1 f5fc2044d47f997265a3c33d40044ed29d6826d0
- SHA512 2498398d5f5968b5e4e1de118d71250f659b9f72ca9e72b0ec9c2910733e763dc29b4d12167a07bb26ed4032f0fda2bb0a53ad5ce00d6ef57426249d9a091f63
- SSDEEP 192:lgY1hISICZ64diddvCkAddPeh+/B+QvS0PS3d1PUUSddPPEddA4YIddPemddJf:lruUnVw
- TLSH T149B21130F1D15D18D06FC4E97159BD6824AAA7428B6B5F25EA2B1D32C8DB6FB374230C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target email-plain-1.txt
- Size 651B
- SHA256 b25a518c61eab239b2a00cf0b9b57bca71c048d72cd95c296cdb30f3f537e00f
- MD5 8cd575b94000a8465f8ceca645a7b645
- SHA1 aa93912b3c7dbe15763e78ba034842db4045506c
- SHA512 049463ef95b30f1697e5b3a1d6e7111f10bc66aaf00cffa222c3c2de22fcb319df00cc8e39b660b97c6e92ab5ce7fd39f993c75fee725f54666e88aa89920cb1
- TLSH T1A3F06883512E0000E643AA85E0D5B95E06716B3B1001B84906143FB9420B77DFF7D8E8
- MD5 SHA1 SHA512 TLSH
Score1/10