Overview

overview

7

Static

static

3

476ef15d50...a7.pdf

windows7-x64

1

476ef15d50...a7.pdf

windows10-2004-x64

1

original.exe

windows7-x64

3

original.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    476ef15d5087372366c75cd90c4273f30a68fe0c2b45e9364f433a4b1006cda7

  • Size

    1.1MB

  • Sample

    221022-pj17padae7

  • MD5

    7a208767406d312039a46c3d064ea91d

  • SHA1

    2709390630cd9639b662eae7b2c394d4f8fbcaad

  • SHA256

    476ef15d5087372366c75cd90c4273f30a68fe0c2b45e9364f433a4b1006cda7

  • SHA512

    76fae9748eb563d6423eb274580982fa3ab4630055bde09de0c20e7fc39b41e83bbf368ae7d0a983b1080920ffeaefd94331e900cbcc66b84040ca68e9f7be56

  • SSDEEP

    24576:RPyxomNXIRty8yGObkT6xu8OyvzSyJXgk6bOY2XJf:I1Nu8JGAZtVJb1RJf

Score
7/10
linkpdf

Malware Config

Targets

    • Target

      476ef15d5087372366c75cd90c4273f30a68fe0c2b45e9364f433a4b1006cda7

    • Size

      1.1MB

    • MD5

      7a208767406d312039a46c3d064ea91d

    • SHA1

      2709390630cd9639b662eae7b2c394d4f8fbcaad

    • SHA256

      476ef15d5087372366c75cd90c4273f30a68fe0c2b45e9364f433a4b1006cda7

    • SHA512

      76fae9748eb563d6423eb274580982fa3ab4630055bde09de0c20e7fc39b41e83bbf368ae7d0a983b1080920ffeaefd94331e900cbcc66b84040ca68e9f7be56

    • SSDEEP

      24576:RPyxomNXIRty8yGObkT6xu8OyvzSyJXgk6bOY2XJf:I1Nu8JGAZtVJb1RJf

    Score
    1/10
    behavioral1behavioral2

    • Target

      original.pdf

    • Size

      451KB

    • MD5

      b9ae4849a6729ce47b7c6bec3c76405f

    • SHA1

      2b64f3adaa279c12466133e3df6735a8c1645aab

    • SHA256

      d8f04a1cc197cce6f68837967841c848827e27d9eec958c60c2e6eff720fbeea

    • SHA512

      83087c5152e257bac4038163dd083ac362c1718b3c656d247d8d66cc49366db5b82cde6c84ef6eb3c8b4c784aa66563e3c50fe3a73d5bbde665fc32c30f7a2b6

    • SSDEEP

      6144:xCEWjl7s5t38dX6p9E4MU7kpITcnFOHuln+Otc+EkzI8jSejCE8aKP3sGvL4hcy1:xL7CsmFK9AbzdTD/gOuSzQRs

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks