General
-
Target
Production order List Quotation.pdf.exe
-
Size
435KB
-
Sample
210115-69gxexj8ea
-
MD5
1890133e76ec2fe09839907d1172e605
-
SHA1
2c7e88feed5784a381b9e5ce01c9308929497f61
-
SHA256
77feba00f6a55111f34c82733f30836d566baf560e3db58b9866caca55d303d8
-
SHA512
e4d21563688ac6cd65d04374c25831d07ad518f974db70c3fcde20bddeb8172ecad4fc0b7676b894d60810d6a9018d9e36b4e719da2c045189e45417b71773ad
Static task
static1
Behavioral task
behavioral1
Sample
Production order List Quotation.pdf.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
Production order List Quotation.pdf.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
Production order List Quotation.pdf.exe
-
Size
435KB
-
MD5
1890133e76ec2fe09839907d1172e605
-
SHA1
2c7e88feed5784a381b9e5ce01c9308929497f61
-
SHA256
77feba00f6a55111f34c82733f30836d566baf560e3db58b9866caca55d303d8
-
SHA512
e4d21563688ac6cd65d04374c25831d07ad518f974db70c3fcde20bddeb8172ecad4fc0b7676b894d60810d6a9018d9e36b4e719da2c045189e45417b71773ad
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-