General
- Target DownloadedMessage (23).zip
- Size 43KB
- Sample261026-1e7dpay1by
- SHA256 df31cfc007f03a7a23890784cb19a4557e2a0d502deea7dcc8f958eeb91963e9
- MD5 9de75aa9be147eb35ae19980f0f7642b
- SHA1 37bf3d4803ab311edaa7de812aa8a5c2880571ed
- SHA512 22693f6c0875b5e9bcdd66dbbc51bcd522bdd391ba4ab9b3322594824dfadd169ed650b998cf8b643d4b231e19f118ca61afd6ede38866e893c3e581f388e56a
- SSDEEP 768:LNqkts6fbjr22rtpggoCJ9+UFunox7IennvIi9ugqmA3H/aDVn2nh8O40P4B:LNhtvfr22rnzJ9+UFbBI8I6ZqDCn2nhW
- TLSH T177130293588B364649AB6B37590190E43C287D8D95CB0A8C09B090CDEEE4DF46B95F7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Message.eml
Resource
win10v2004-20260911-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
Message.eml
Resource
win11ltsc2024-20260911-en
18 signatures
900 seconds
Behavioral task
behavioral3
Sample
ad0901902684092260000017d.xml
Resource
win10v2004-20260911-en
5 signatures
900 seconds
Behavioral task
behavioral4
Sample
ad0901902684092260000017d.xml
Resource
win11ltsc2024-20260911-en
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
fv0901902684092260000017d.pdf
Resource
win10v2004-20260911-en
7 signatures
900 seconds
Malware Config
Targets
-
- Target Message.eml
- Size 62KB
- SHA256 52896474a9bc18ab8ce4cac63bb85ab9d24328a2146a88e09da02e696e2c03e2
- MD5 b2de2c3b6851139f82768f4a3f6a2b74
- SHA1 2f412fbd669897a89270f9a0dfa851473ef513f2
- SHA512 b4b986f36b49fbad8abce8acf8fe64468d979b184ae8fc6621e882cc1a39d34ca668b9475b5ab11377b8c393f00784ec4e02b0e0573360a0436d454966c6ac01
- SSDEEP 1536:pFb1NGzkm+skGoq8zA0++kNTGa/+earUEEV1s:xYGs/oqzdL1wrpEV1s
- TLSH T1F153E13046264FCFDB7341B724807E14D3D0B90A85399194291FA5FB1ADBC3A9F9AB87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ad0901902684092260000017d.xml
- Size 34KB
- SHA256 6d9ff93b23b485716c1137a2719815c55a0ecbe4b18c910603bb50d100acb5ae
- MD5 cb6d9499280514349c0edfde4c27d82c
- SHA1 9fc3da053801cee077992de23c8cb1f1ffc371bc
- SHA512 f45bcf69dcb438f250850c6c098b9ce1340a25b4f9dc1977cf52937986f253f31f8c25abe522f342878def5cd9af2a0d0c434dbe24889dcbd99023c5be3bbfe0
- SSDEEP 768:MH9T15koy0HT15kRtzWQ4/3Q4/ypQMUvr5pCJWXAzDGhSVgQJHiEOHA5FKWcprcn:UCtzWQ4/3Q4/YQMUzCJWXAvYSV/diEGq
- TLSH T15CF22BED88D91CC171134E3DEE97FD09482068AB68E8D53CF8DE27792FE4A6018575B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target fv0901902684092260000017d.pdf
- Size 26KB
- SHA256 3e7b948248228e57694b8e3b5295653344c86671144d2b7fbdc87a19b8f353dd
- MD5 b745c1c882d4bfee057baa6cae98a127
- SHA1 466c105398a3a9ffae25faad1139a64093327c3d
- SHA512 16c887e652f54f30f3fa7f82109fe8258c79be6ae0f1401d5cd664b94366105796b1851070b8281582eeecb230be8fe6857a1860e61e8cb5bf439d3b15cdf355
- SSDEEP 768:FFgZa0xy6SLTE1IJct5nHXVD2gqpujBLsSG:FFgXy/Jct5nR7jJsb
- TLSH T1C5C2D078DA96998EC3964DC7A35F354E248CB1B64FC878A320518D8C928CFE4F677096
- MD5 SHA1 SHA512 SSDEEP TLSH