Overview

overview

7

Static

static

proforma pdf.exe

windows7-x64

7

proforma pdf.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ADC91BFAC93297757E762BE9553FD2D2998A56DCD367C49F619DE7CFC4AF2512

  • Size

    251KB

  • Sample

    221123-r2v5haab93

  • MD5

    556820350c4c3e6d8888f1d28d0614e1

  • SHA1

    750236b1d2dbd2055c89b2308d0ec69eee76b2cd

  • SHA256

    adc91bfac93297757e762be9553fd2d2998a56dcd367c49f619de7cfc4af2512

  • SHA512

    8f50fe33558a8e806b0d40e862d444a7f02163023891e75d86420d63756116069967dfcc2c7d704b629ea41362e882ccc86979224079013a75ac62925178904c

  • SSDEEP

    6144:ey5O0D/6J79IihyM+QLR0Gcli22+X1OTJ5ImfdJzjspk:80DiR9IMhL8litZTJBfz0e

Score
7/10
discovery

Malware Config

Targets

    • Target

      proforma pdf.exe

    • Size

      565KB

    • MD5

      397a2d57cd4dcc80128c08852de63e62

    • SHA1

      3ca4fab339ac00e75ab207fc25eb1c33d5a30edc

    • SHA256

      69b1f9d8334bb44d7b7f10a9efc31ad30cfe72ded8bd3e4a6da67b71a2bd485d

    • SHA512

      c01723ba9728cc2dc70c0d0a19c228d8d49d7cf6b2bab79d28833c9bea1f7630df581baccf77b14156408d3b6e156a0d067ac6873980c7ed648f3f772ddbcdd7

    • SSDEEP

      6144:mp+ggf0T+/tfjpT0hQfggzGSA0NI48RjjCYw5QGXdjF2t3w:S60T+JVTAoli4QCdXdj8tA

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks