Overview

overview

5

Static

static

回复PO�...df.exe

windows7_x64

5

回复PO�...df.exe

windows10_x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    回复PO残跟踪状况-20210211_pdf.exe
  • Size 487KB
  • Sample210211-tbksbjbc76
  • SHA256 fa0c59c6418d5bc0a4efc4a543c49b5e6e1a92f5ecf1ffbceadc6cc9bdf0b63b
  • MD5 SHA1 SHA512
Score
5/10

Malware Config

Targets

    • Target
      回复PO残跟踪状况-20210211_pdf.exe
    • Size 487KB
    • SHA256 fa0c59c6418d5bc0a4efc4a543c49b5e6e1a92f5ecf1ffbceadc6cc9bdf0b63b
    • MD5 SHA1 SHA512
    Score
    5/10

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks