Overview

overview

10

Static

static

3

E12933-ANE... F.pdf

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    E12933-ANEXO 3 PARA REPLICA DEL SISTEMA V.3 F.pdf

  • Size

    324KB

  • Sample

    211228-1hlamaebh7

  • MD5

    9bfe59ac954df58cdb65c6b41cf515c0

  • SHA1

    bfcf8a974efb75757d9763755c18d918f8c4ed02

  • SHA256

    73a21f160ff3711fbd7d7bc4d682f0caf32c90cdf715ca8fabeed1a7efbc78ed

  • SHA512

    852a768a3de1f27f086e806f694d89bc0c642171427ad6cb9748f998d9ecde38aa88ac3217bfce20282f18dc40542901758937532aeb3ccaaab9f8c7e5ab3587

Score
10/10
linkpdfpersistence

Malware Config

Targets

    • Target

      E12933-ANEXO 3 PARA REPLICA DEL SISTEMA V.3 F.pdf

    • Size

      324KB

    • MD5

      9bfe59ac954df58cdb65c6b41cf515c0

    • SHA1

      bfcf8a974efb75757d9763755c18d918f8c4ed02

    • SHA256

      73a21f160ff3711fbd7d7bc4d682f0caf32c90cdf715ca8fabeed1a7efbc78ed

    • SHA512

      852a768a3de1f27f086e806f694d89bc0c642171427ad6cb9748f998d9ecde38aa88ac3217bfce20282f18dc40542901758937532aeb3ccaaab9f8c7e5ab3587

    Score
    10/10
    persistence

    • Modifies system executable filetype association

      persistence

    • Registers COM server for autorun

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Change Default File Association

1
T1042

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks