Overview

overview

7

Static

static

4

COTIZACION #0024.pdf

windows7-x64

7

COTIZACION #0024.pdf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    COTIZACION #0024.pdf

  • Size

    172KB

  • Sample

    240425-tt6blscd7v

  • MD5

    1920729f128f05542e9383110f8d6495

  • SHA1

    79d5d935b44e2cefe461e696b6e196837dae15d1

  • SHA256

    e4c1bf841484e83eaf1f43575d0c2a0d51cb05c6ebe0224a75ebd9742d712ec1

  • SHA512

    1cfbfef0ff42beb416e4610701bf195a87263708f9fbd576074c7231235acacb5aa8b27a54a942bc1019cb6e4162568ff5f1570a11962f515b139591166e3721

  • SSDEEP

    3072:kWw5x2P4d+G6Fr+3hrQKecv97qq9kIj52WuoLig88gkT9VFcpYE/3I:Bwqwd+hFQJeC97ZXfuoLiX8gkTbFboI

Score
7/10
linkpdf

Malware Config

Targets

    • Target

      COTIZACION #0024.pdf

    • Size

      172KB

    • MD5

      1920729f128f05542e9383110f8d6495

    • SHA1

      79d5d935b44e2cefe461e696b6e196837dae15d1

    • SHA256

      e4c1bf841484e83eaf1f43575d0c2a0d51cb05c6ebe0224a75ebd9742d712ec1

    • SHA512

      1cfbfef0ff42beb416e4610701bf195a87263708f9fbd576074c7231235acacb5aa8b27a54a942bc1019cb6e4162568ff5f1570a11962f515b139591166e3721

    • SSDEEP

      3072:kWw5x2P4d+G6Fr+3hrQKecv97qq9kIj52WuoLig88gkT9VFcpYE/3I:Bwqwd+hFQJeC97ZXfuoLiX8gkTbFboI

    Score
    7/10

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks