Behavioral task
behavioral1
Sample
TT copy Mar-24.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TT copy Mar-24.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
file has been verified. however PDF, xls, xll, .docx
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
file has been verified. however PDF, xls, xll, .docx
Resource
win10v2004-20240226-en
General
-
Target
TT copy Mar-24.pdf
-
Size
1.6MB
-
MD5
6f5a8b95553130f46c7f360397125eb1
-
SHA1
a3ba43e2af9163c2fb1c2cd58260a2c092d66d04
-
SHA256
109c7a869ad54149fff978ac048dd409574e0bcec8f0cb5f6bb9fb60b7ab76ad
-
SHA512
7554784e5447fad330deaca44ac739a57cb96d41abe5b3f9820fe3e6cad5d32333169b73e92228bcbf6828aa1dd76bd76b29879e13ea37800ff76ae3e654a0b5
-
SSDEEP
49152:Azs5t5tgtrtKt1tlt6t3t8tRtGtjtYtdtyt8J:Mkt5tgtrtKt1tlt6t3t8tRtGtjtYtdtr
Malware Config
Signatures
-
PDF contains JavaScript
Detects presence of JavaScript in PDF files.
-
PDF contains one or more embedded files
Detects presence of embedded files in PDF files.
-
Office document contains embedded OLE objects 1 IoCs
Detected embedded OLE objects in Office documents.
resource yara_rule static1/unpack001/file has been verified. however PDF, xls, xll, .docx office_ole_embedded
Files
-
TT copy Mar-24.pdf.pdf
-
file has been verified. however PDF, xls, xll, .docx.docx office2007