408eebd247ba22edbe65800f08f21b4f3438f9b69ecaa7c4136f8860826a6d78

Sharing

Copy URL Twitter E-mail

General

Target
Numero de Ticket 673006.msg
Size 444KB
Sample261022-zzapsatzdt
SHA256 408eebd247ba22edbe65800f08f21b4f3438f9b69ecaa7c4136f8860826a6d78
MD5 d4ce68e41b3f95fd5320f0c9a18e4c5b
SHA1 4f750df18c49dc555c0e98422ffd518c62204bbf
SHA512 968a428c202bd6afb6892fdb2f053b349e9439ce85bfd96d770297937359560d584cf7856171a0706c4e0bf226ff1794b13a736d53eb708e7834b32cefe83502
SSDEEP 12288:8CvfuaELZ+jV/7eJ9JCVGNWvD5Zy7CdgCLG:Zuaa6xiJnCV3bzy+6Z
TLSH
T1CFA4AE2536F51326F2B79F7589F340939926BC52AD24CA4F2295334D0A71B41ECA3B2F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Numero de Ticket 673006.msg
- Size 444KB
- SHA256 408eebd247ba22edbe65800f08f21b4f3438f9b69ecaa7c4136f8860826a6d78
- MD5 d4ce68e41b3f95fd5320f0c9a18e4c5b
- SHA1 4f750df18c49dc555c0e98422ffd518c62204bbf
- SHA512 968a428c202bd6afb6892fdb2f053b349e9439ce85bfd96d770297937359560d584cf7856171a0706c4e0bf226ff1794b13a736d53eb708e7834b32cefe83502
- SSDEEP 12288:8CvfuaELZ+jV/7eJ9JCVGNWvD5Zy7CdgCLG:Zuaa6xiJnCV3bzy+6Z
- TLSH
  T1CFA4AE2536F51326F2B79F7589F340939926BC52AD24CA4F2295334D0A71B41ECA3B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware discovery spyware
- Process spawned suspicious child process
  This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  UBPD-1-2026-020441.zip
- Size 334KB
- SHA256 8b8433a39f96591ffa3af652004e8797dbc68debd2b1a11da4f2fa31d2ee2c93
- MD5 db017770edd42ccfdc7202222b1c2c9b
- SHA1 13ec13bd0d1de1d5abedf0b7d831690518f61807
- SHA512 6273a7562bbf71c6e0c425fb832f08f60f5d79e16689f6768d3fb4defa87bdf1c18cbf5cb23a2572ac418b4419fe2b672b5682707402d5211014ea333fbf748a
- SSDEEP 6144:FIibCaE9ZZEXF9E6Pq6b2wX6Rh/qkjLJCVGNWamD3pZPa75M4QgBoR1Q2GH:FfuaELZ+jV/7eJ9JCVGNWvD5Zy7CdgCs
- TLSH
  T13874232DC122B2F6D8561FFE0345D3E26F15351362E88A07AFAB5E6003442FBC5D9E16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  UBPD-1-2026-020441.pdf
- Size 288KB
- SHA256 8411dccf94b68cdb9dacb1b692b4c781c7884e106fa3bcf62ec8ab962007c59b
- MD5 53aecee1d8f4ea99a4446d656b3f54bc
- SHA1 ab2de99799db66ff66e63479b0a679ee7f3cb750
- SHA512 0d88034b1739960a725bda6e3f40ca52643da4680455cf935b46781dc16c5db6fafdc73a9bdfd875593262188d228607a70c0a26f0eac3652310ee169905968b
- SSDEEP 6144:JM369ZeAfr7sW7wX6ETKqa6vkjLJKTGNWKQOJq:C36Lj3ihTveJKTGNWKQUq
- TLSH
  T1CB54F130D841ACCCE88ACBA7D679B55A035DF237B1CD58D10CBD4B626200F9AE6936D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  UBPD-1-2026-020441_NoticiaElTiempo.pdf
- Size 110KB
- SHA256 5e4eb501b7801226fa959ffcdd18beef9db626809e08fd18741bbc6fb22f9657
- MD5 b65d96d3e222dc64b72bb004d0b95164
- SHA1 a3a4caca470377dc943e0b28de87c2a4a2e2376b
- SHA512 466a57de607ac31129d851f15a186462f727ca921eaf402c3302a72bd3bbb86402c308c8150df01500e42085a55ed57a7997e59388176306ccf25c9ec76147ed
- SSDEEP 3072:obHQ7EakVgN9PafsKJDg8odGumjZxBI1ufIL4:XEapXUgLh8xO1uR
- TLSH
  T1B5B349B0E8558CCCFCD5CA868176B12D8A2DF31BA8CC78C5512E4B13E541B8A67976CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Process spawned suspicious child process

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8