5d792a76837d6ed793c7103419f6b6d1bea20fae593a683e37712396e97b313c

Sharing

Copy URL Twitter E-mail

General

Target
24c73458-d2f9-f451-2a03-0c6cc4052d98.eml
Size 216KB
Sample261023-pwlyjach69
SHA256 5d792a76837d6ed793c7103419f6b6d1bea20fae593a683e37712396e97b313c
MD5 c476ee3a51fff18efd9d0bb8ebee4ef3
SHA1 af91b964d357dace63f7f41b5ad97a5a6a86b809
SHA512 2f38d77140a4e8f6eb57fc024d0aecae0ac40451f5c56548dcef206a6486c43e029cdeb934fcc9bff213e5d4ff43c6e86324e5569b7f11141e1bd11c1aa36348
SSDEEP 3072:bGTm4aXf1fu7Lq0Zgi7nrdtAP/3j8fTrE49luV+HKc3KB65z6IL4l/OJK11hqbE:bGi4aXNcZD7nrdt5uVBgKBcz6u4QU+4
TLSH
T103249D21154D9FBDFE329C9CFE06BCBA5E6118DCE20BC4CE555E21F44BAA1608A85DF0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  24c73458-d2f9-f451-2a03-0c6cc4052d98.eml
- Size 216KB
- SHA256 5d792a76837d6ed793c7103419f6b6d1bea20fae593a683e37712396e97b313c
- MD5 c476ee3a51fff18efd9d0bb8ebee4ef3
- SHA1 af91b964d357dace63f7f41b5ad97a5a6a86b809
- SHA512 2f38d77140a4e8f6eb57fc024d0aecae0ac40451f5c56548dcef206a6486c43e029cdeb934fcc9bff213e5d4ff43c6e86324e5569b7f11141e1bd11c1aa36348
- SSDEEP 3072:bGTm4aXf1fu7Lq0Zgi7nrdtAP/3j8fTrE49luV+HKc3KB65z6IL4l/OJK11hqbE:bGi4aXNcZD7nrdt5uVBgKBcz6u4QU+4
- TLSH
  T103249D21154D9FBDFE329C9CFE06BCBA5E6118DCE20BC4CE555E21F44BAA1608A85DF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

adware spyware microsoft discovery phishing
- Detected potential entity reuse from brand MICROSOFT.
  phishing microsoft
behavioral1 behavioral2
- Target
  ACOUWOOD - Checkliste 1709.png
- Size 144KB
- SHA256 63da7ec2435a2564ed0c30f01d5a226cd28d37b3cd8d2a9f28df85b54b6fc0fa
- MD5 52550762ceba901c31fd73bfd229720f
- SHA1 ba0a671d6363d64a3a5238b941090319ea0820c3
- SHA512 3ab97120dd90dc7a9842bd5cf3105dbdd59a08bfbe6a95f1ec028528b8ac55ba9f4e37cfd57582dcaf2dab31d2681fa505d6d48f03077636d0f833538ecb72c9
- SSDEEP 3072:Zu999999FGd2jIDEfxDZxV9BvoWz3ZWWWaLKbmBbLpvykq:Zu999999njG0xDPTBvoWzpWzjbYfpvS
- TLSH
  T1CFE32823D660653BA479523031032A5350756CABB13CFE465BD239AE1B2BBF8FC31DA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  email-html-2.txt
- Size 1KB
- SHA256 0400228e6f6ed82c476a292d29c3b4e27bc0ad907b5244eb211176fc5f2acc3d
- MD5 0e7d9b767376b065e876091b73c0b1c9
- SHA1 80189f9850dd82049a9bfde05a1031e762c746f5
- SHA512 6443d183625f1aa5d4d421b0836c80b04cb7599a619e06a489f660d1fe54c8411104ba92d5ea7897d05f637a77dceb85f08793aebb792a2c1f272160518545fe
- TLSH
  T170312253D2547D1ED27350B8E1A2FFA58BC24209E30749A442B6617BF9CD874A6B33CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  email-plain-1.txt
- Size 263B
- SHA256 dd65885fb75357aa99e16e4bb2ed63e9cf0c896b2cff3a3d30d6386417b44039
- MD5 b3e42b8e8aacaa2babb4bfb998e32440
- SHA1 da0967ed82c1ce2ced869b24f82416c002d37394
- SHA512 189f0f3613836f669505a36b134f3511f8b402c1d869954b13483ac4fd9249c1f053f65b786f9b6978c0a105807ea6e9868d2b46eb59d3239686252d15fdbb8c
- TLSH
  T149D02B7BF0016340D2152180A6808692DD91A26AE70214385554E5CC50526A8FAB6A35
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detected potential entity reuse from brand MICROSOFT.

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8