General
- Target Re_ Release of Information 3 - Max Whitehead ([email protected]) - 2026-03-27 1219.eml
- Size 11.9MB
- Sample261020-ntp2qsyzhy
- SHA256 d4a083bce24a3a2a33f4dc198ec7ed43fa3d13676594d28f83dc19e8caac467a
Malware Config
Targets
-
- Target Re_ Release of Information 3 - Max Whitehead ([email protected]) - 2026-03-27 1219.eml
- Size 11.9MB
- SHA256 d4a083bce24a3a2a33f4dc198ec7ed43fa3d13676594d28f83dc19e8caac467a
Score1/10 -
- Target Draft JC ERA Employment Problem.docx
- Size 11KB
- SHA256 99736279729e4d42f774a060ea7e6ed54335e533cfd35c5764dbcfac03a4058b
Score1/10 -
- Target ERA Problem Statement.docx.pdf
- Size 83KB
- SHA256 fdf92d3c7905e6a788728e19360de5e9b361ee19d29f584845f0bb9d9a548044
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gmail - Driver Licence Access Log Request- Jason Peter Clayton.pdf
- Size 141KB
- SHA256 07337f94d985e2bd16e68b761687cb36187fc0c82420279759c837e7fda72ea5
Score3/10 -
- Target JC_ERA_Draft (1).docx
- Size 35KB
- SHA256 a168b9ec8e98ad6b359397e19605ffc18775dfa2dddbffff602b38a3bda5767e
Score1/10 -
- Target Metadata-Formal Disciplinary Hearing.json-metadata.pdf
- Size 226KB
- SHA256 528c80d21324abe81baae00d42547e9350b7d300aafbf860ce77a118044f32fb
Score3/10 -
- Target Revised ERA Application 090226.docx
- Size 18KB
- SHA256 39489d2734b1a4750bdea8fc4a15f529ba05bba7fcfdaa0f76947fc59caf55b8
Score1/10 -
- Target Revised ERA Application.docx
- Size 18KB
- SHA256 4e03574e965d1e776c6751fe967126b278aa21d9e00d61ff91506e48320d0082
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target SETTLEMENT_ Fraudulent Dismissal.docx.pdf
- Size 80KB
- SHA256 65e9ff7e77ceaf676e1fa0b3f0bddada0fe569f7bfaa4f52f2d6730a179cbb03
Score3/10 -
- Target DOCUMENT 1_ Statement of Problem.pdf
- Size 54KB
- SHA256 656b11160b7e3197b68ffbaf11d63e3f6d5634bd14a21ae83a5a729e38c20211
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DOCUMENT 2 Urgent Re instatement.pdf
- Size 53KB
- SHA256 000a6ce4da665ffa2dfc60234ca151a22d6db9cc17026d2f82c09c041307eaad
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target J Clayton Certificate of License Particulars.pdf
- Size 565KB
- SHA256 e8192540e5d982e177d14cddfd2c8e5239d1e145d637cb89a46b06c59d52abb8
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Jason Clayton - Letter in Response.pdf
- Size 3.8MB
- SHA256 e52c2554cf412637c0f4fd26e858f6c3ee240ad0d98caff73769e571289b0579
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Response- Mark 21_1 letter.docx.pdf
- Size 105KB
- SHA256 b84d8bad1b3fe4d6b631ffddc25abd3a8a3a42f87ccc1ecc5c25d656405b685f
Score3/10 -
- Target Undertaking as to Damages.pdf
- Size 43KB
- SHA256 657fe66994ef1ca337693df1624353fc9f0128be519bceb9f1e2d9e75ebdf0fb
Score3/10