Overview

overview

10

Static

static

3

88480 549d...43.pdf

windows11_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88480 549d1468444 d81858d905 76369d92 864489d4 699165 3d8601 387d0 8548586 d66880 d780915d63 6d465 20d84680d847 443.pdf

  • Size

    92KB

  • Sample

    211029-mqzlbshhap

  • MD5

    de4c77ed293d24aa54eb6830e849ba36

  • SHA1

    00f2c1d0a70b334fd57a4b329b2582e08c3a7aaf

  • SHA256

    c1c19f943bbc0bc6cf01c919ad5b2c44f22fcf7299e8e09588e78bbf4bf1f1ae

  • SHA512

    ad35d737eac465b297f5a6717059dda52ad383da524feddd0b63c0d7c913902e7dbeecca575b3e6eefff0cf8fe0bb4808cc45d9de66e6adb6a769a343434d679

Score
10/10
linkpdfpersistence

Malware Config

Targets

    • Target

      88480 549d1468444 d81858d905 76369d92 864489d4 699165 3d8601 387d0 8548586 d66880 d780915d63 6d465 20d84680d847 443.pdf

    • Size

      92KB

    • MD5

      de4c77ed293d24aa54eb6830e849ba36

    • SHA1

      00f2c1d0a70b334fd57a4b329b2582e08c3a7aaf

    • SHA256

      c1c19f943bbc0bc6cf01c919ad5b2c44f22fcf7299e8e09588e78bbf4bf1f1ae

    • SHA512

      ad35d737eac465b297f5a6717059dda52ad383da524feddd0b63c0d7c913902e7dbeecca575b3e6eefff0cf8fe0bb4808cc45d9de66e6adb6a769a343434d679

    Score
    10/10
    persistence

    • Registers COM server for autorun

      persistence

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

3
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks