Overview

overview

7

Static

static

Payment Ad...df.exe

windows7_x64

7

Payment Ad...df.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payment Advice copy 00019....pdf.exe

  • Size

    1.4MB

  • Sample

    210723-jndn4z7lp6

  • MD5

    c3c9fecc65c77e6b96c8eb8640bacc36

  • SHA1

    64140c46f2471cc8431fbda56d64019c90ff15ab

  • SHA256

    ecc8293f6aa073abd1d40cae1f945978f4fcea27b8baf67ee1b5856c45e0d698

  • SHA512

    08afede9df6161325090aed194970cc9b0081976ba6c6d26cd56a5b05d0c8deeb248669881c50ba618be8c378a86c939d8e135a6ea9ffb3a3548b47683b5e159

Score
7/10
agilenet

Malware Config

Targets

    • Target

      Payment Advice copy 00019....pdf.exe

    • Size

      1.4MB

    • MD5

      c3c9fecc65c77e6b96c8eb8640bacc36

    • SHA1

      64140c46f2471cc8431fbda56d64019c90ff15ab

    • SHA256

      ecc8293f6aa073abd1d40cae1f945978f4fcea27b8baf67ee1b5856c45e0d698

    • SHA512

      08afede9df6161325090aed194970cc9b0081976ba6c6d26cd56a5b05d0c8deeb248669881c50ba618be8c378a86c939d8e135a6ea9ffb3a3548b47683b5e159

    Score
    7/10
    agilenet

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks