Overview

overview

8

Static

static

4

Exchange P...df.lnk

windows7_x64

8

Exchange P...df.lnk

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a488b6bc2f4674c3a8fada86cc2794888713e61278c7c47d27f9706be0d18f4d

  • Size

    1.2MB

  • Sample

    211029-fskrmaceg4

  • MD5

    42e6310ffbdd24cf9a2b5d200190359e

  • SHA1

    8197b6f95fb3c84c61a919644caeddcccc4a84a4

  • SHA256

    a488b6bc2f4674c3a8fada86cc2794888713e61278c7c47d27f9706be0d18f4d

  • SHA512

    7a256c23427f9c7e48c55f621303f8b30ea28d0570782d60536ba897647611b92bdcdf9d359d3417ca52c220213205350df04ebeb5f2d6441c0c7b9d17918c6c

Score
8/10
linkpdf

Malware Config

Targets

    • Target

      Exchange Project Management Plan_Q3.2021.pdf.lnk

    • Size

      1.3MB

    • MD5

      4b9366f2dcab60d56d09e69e21d77d91

    • SHA1

      a46318a25582c2616f33f49f7af986137637ba1d

    • SHA256

      51eaf8af57211f8d9e534f98413e71f4ddf5abcce806a111fc49a30d3bcec696

    • SHA512

      4b1bdfe4d09ed047122824536e5a1f59d533c8e1780a2cbab84398a8a1ba838de916ca99234b055a49e956d9fc539a961665764a3b89dc0d6736b8d6ce1b5d04

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks