General

  • Target

    Ferlam Technologies August 2023 PO pdf.exe

  • Size

    1.2MB

  • Sample

    230804-nv6e4sag28

  • MD5

    2b0ea46162011d71dabc5f7b41e4bb33

  • SHA1

    4c53a78fb6fa54e4e758cd7ef37776df59744d33

  • SHA256

    d32a2995531b8fb3a8836f10e5239219715488a71d6b83bff5c9dad615ab8fa6

  • SHA512

    22187c8b22daae6ffb8d8ca807736ca141c31c149614adb667f3a48a8da189afb6a0e4d4fac608ab3e3df0eaaa7fa472b299b1cb1829ef562ca83c1e0132c0c9

  • SSDEEP

    24576:BU+iDJtfBV+bTJy+O8GbF12dUOA46B0dwj2jHy:mf+ADtSjH

Score
7/10

Malware Config

Targets

    • Target

      Ferlam Technologies August 2023 PO pdf.exe

    • Size

      1.2MB

    • MD5

      2b0ea46162011d71dabc5f7b41e4bb33

    • SHA1

      4c53a78fb6fa54e4e758cd7ef37776df59744d33

    • SHA256

      d32a2995531b8fb3a8836f10e5239219715488a71d6b83bff5c9dad615ab8fa6

    • SHA512

      22187c8b22daae6ffb8d8ca807736ca141c31c149614adb667f3a48a8da189afb6a0e4d4fac608ab3e3df0eaaa7fa472b299b1cb1829ef562ca83c1e0132c0c9

    • SSDEEP

      24576:BU+iDJtfBV+bTJy+O8GbF12dUOA46B0dwj2jHy:mf+ADtSjH

    Score
    7/10
    • Drops startup file

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks