General
- Target Urget Contract Action.zip
- Size 424KB
- Sample260930-l2ff6av15j
- SHA256 137cfbc6611add95e7dd00247098efc9aa4b16771d62c20a5d149f2181da6d6c
- MD5 607104ec5c797bd46a0a6bc76bfac512
- SHA1 d6c5562c2c63c5d164cf09ab8c829cf8d4ed1581
- SHA512 0fdd49b6939bcf281a2cbcd50ab53989864a498e37dbf0d55ebc8f2e1ec3ee14c41ec52c8828d99f1ca612d95a53f22d2c76c0d8aa219740f00a736d9573b0b2
- SSDEEP 12288:ZUpblYhNXCaq0DXHyLoo4Re+Bo3KhiJeHMgV+awgp:ZUpblYDXZDXKFJ+BOKSi+5G
- TLSH T146942368D26149A76B8CB67F0B96CC16E338936640ED2645CC809F316DEC48D773BA8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
email-html-2.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
email-html-2.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
email-plain-1.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target email-html-2.txt
- Size 4KB
- SHA256 2843f5721f82a52a0de9adb17b4a39ead22356711065a7deff15b0d7c5dd3523
- MD5 54e28bc9a318a7c34ba36b040ae22f7c
- SHA1 8e1b616b2d55f1bf7db468863c0ac9b875f8e883
- SHA512 286024e1d4f89c21513437ec6ad9115dd6cf45e2de7b7a49ae27f687498a439f2bff2d912b15f9d1efb868144fd63fa7214dce7f277d5e260ac770f8bf7b58a3
- SSDEEP 96:VAeznkXKWFEwchCH5dmklZoey1c7QDPMPpPc:yQULEfe5UkDfQIhk
- TLSH T1CE915B6AC233390702C32004D315BFA26743B288D25A6FB17ABD211F7798A65217FADC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target email-plain-1.txt
- Size 3KB
- SHA256 e58a6b8c4042916b7c7299c9ae49bb9f2ce281e1cd62abb6c6e82938bc97dd7d
- MD5 d12a8819f44c12586fad964d4d15de58
- SHA1 4f2a7b1fa287d412b250762e70547e5afaba03d1
- SHA512 3dcaac6ca5f8291fbb06a71424f270899866ef86f83daa3a3d8959a0714e394ef4a76831a9eca971c293983b2eb43d2566d9e1ec272fddcb48630dad048acbaa
- TLSH T123713C2BD147211A05D374011318BAE3BD63F388929AAD536EB9311E2318DBA6323EDC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.