Overview

overview

6

Static

static

1

2026101215...ar.zip

windows10-2004-x64

1

2026101215...ar.zip

windows11-ltsc_2024-x64

1

2026101218...ar.eml

windows10-2004-x64

6

2026101218...ar.eml

windows11-ltsc_2024-x64

6

Comprobant...A,.png

windows10-2004-x64

1

Comprobant...A,.png

windows11-ltsc_2024-x64

1

email-html-2.html

windows10-2004-x64

6

email-html-2.html

windows11-ltsc_2024-x64

6

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    202610121528_COMPROBANTE DE PAGO 9 DE OCTUBRE 2026_jaguilar.zip
  • Size 181KB
  • Sample261012-1bv69aeg64
  • SHA256 47c1260d8f6d366846f5c59ec664258663e41cc1e6a36db4694f5e5b93a2b151
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwarediscoveryspyware

Malware Config

Targets

    • Target
      202610121528_COMPROBANTE DE PAGO 9 DE OCTUBRE 2026_jaguilar.zip
    • Size 181KB
    • SHA256 47c1260d8f6d366846f5c59ec664258663e41cc1e6a36db4694f5e5b93a2b151
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      20261012185130-COMPROBANTE DE PAGO 9 DE OCTUBRE 2026-jaguilar.eml
    • Size 253KB
    • SHA256 058ff33c373fc7dac0399945b6e3a91a4215f68df67fb1eacda92340220031a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    adwarespyware

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral3behavioral4
    • Target
      Comprobante ACH-AET- POLY FIBRAS, S,A,.png
    • Size 169KB
    • SHA256 9a68a6277295896caffab39157542dfe5e2effb578c4e3982555240e5d392d5a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      email-html-2.txt
    • Size 5KB
    • SHA256 e029a6650d5bf39c6fcd8df768ecfc6a80e03632ec5cf7275e295e27693e6429
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral7behavioral8
    • Target
      email-plain-1.txt
    • Size 1022B
    • SHA256 33dae35398b6b4dd6297f61a454db4ade7119e4fbd0e39c4a3fcfc14d90934ed
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks