General

  • Target
    Message.eml
  • Size 71KB
  • Sample261104-yrpy3afv2k
  • SHA256 e3122c0f41a1f2293d3b0db8fe59f62985f7ecb58a078dea8f56d65a4871d5a9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Message.eml
    • Size 71KB
    • SHA256 e3122c0f41a1f2293d3b0db8fe59f62985f7ecb58a078dea8f56d65a4871d5a9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • A potential corporate email address has been identified in the URL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      email-html-2.txt
    • Size 50KB
    • SHA256 ec354f36aa96f50998cd1a34903f89d43244e65d1f3a114fb99798c6fc38137a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      email-plain-1.txt
    • Size 4KB
    • SHA256 d5a813c76c52f73015ec78095fedd06afd981f5fb1df517a3c16accff18cd8a0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks