Overview

overview

8

Static

static

1

Western_un...pdf.js

windows10-1703-x64

8

Western_un...pdf.js

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Western_union_slip_pdf.js

  • Size

    3.6MB

  • Sample

    230517-pf2n2sea31

  • MD5

    a2270ad96134861ca0156b998197f212

  • SHA1

    9a3d89b0b7757906988681c30b3c931881e1f3ce

  • SHA256

    8c5baffe1739bfd8f919b5654b0a3329a151d8b5543064eef148b49343854f99

  • SHA512

    189b9fc3b224ed1ba5540327ce93626317c55682d8d66075fac3eb4dc344dc0e2a08748108f54424ec259632185e869345658b973340517f7dd5564c00a89d44

  • SSDEEP

    49152:2tHcZbdR8ANQGKpTwv6jI8DLHz+2vyogRlJ8qIh1tVw5KPika8O4Pshfpv:b

Score
8/10

Malware Config

Targets

    • Target

      Western_union_slip_pdf.js

    • Size

      3.6MB

    • MD5

      a2270ad96134861ca0156b998197f212

    • SHA1

      9a3d89b0b7757906988681c30b3c931881e1f3ce

    • SHA256

      8c5baffe1739bfd8f919b5654b0a3329a151d8b5543064eef148b49343854f99

    • SHA512

      189b9fc3b224ed1ba5540327ce93626317c55682d8d66075fac3eb4dc344dc0e2a08748108f54424ec259632185e869345658b973340517f7dd5564c00a89d44

    • SSDEEP

      49152:2tHcZbdR8ANQGKpTwv6jI8DLHz+2vyogRlJ8qIh1tVw5KPika8O4Pshfpv:b

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks