fd0c237241cf1dd94f69484051725c5c791425fba130a5dadc427069e8b367cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kredi Karti Hesap Özeti- 4508 0519.pdf.exe
Size

643KB
Sample

230517-swclmsee7x
MD5

b9903728de0351dfa9bc3e85798f8e4d
SHA1

8569fdecf7e2452a3046b76b21a78e7445049cd9
SHA256

fd0c237241cf1dd94f69484051725c5c791425fba130a5dadc427069e8b367cd
SHA512

f59d65a87ff6e3d36b9256d71a520d83af522d0dc1b377aa72c644a3d6d9036fd49a6f0502fdf301fc6abd40fbba7feb327a83d72cb108876cf77a33066892c7
SSDEEP

12288:Ho4PTYkpIH626Tje1UrOJZdrmGcu0+d5DzjYFw:Ho4PHpSdrL0W53jY

Score

7^/10

Malware Config

Targets

- Target
  
  kredi Karti Hesap Özeti- 4508 0519.pdf.exe
- Size
  
  643KB
- MD5
  
  b9903728de0351dfa9bc3e85798f8e4d
- SHA1
  
  8569fdecf7e2452a3046b76b21a78e7445049cd9
- SHA256
  
  fd0c237241cf1dd94f69484051725c5c791425fba130a5dadc427069e8b367cd
- SHA512
  
  f59d65a87ff6e3d36b9256d71a520d83af522d0dc1b377aa72c644a3d6d9036fd49a6f0502fdf301fc6abd40fbba7feb327a83d72cb108876cf77a33066892c7
- SSDEEP
  
  12288:Ho4PTYkpIH626Tje1UrOJZdrmGcu0+d5DzjYFw:Ho4PHpSdrL0W53jY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2