General
-
Target
dokumen.pub_centilmen-kulb-ekici-erkek-eitim-seti-kadnlarla-tanma-rehberi-1nbsped.pdf
-
Size
11.7MB
-
Sample
240522-1643msah4w
-
MD5
992796fd38abd5c1960144558b616c33
-
SHA1
cf31add8d8c0976137ad5151dd4d0e5ecfdb225a
-
SHA256
3ceeacd954d9196e675252a56d65de3cd9984d9a3733131b55b23eb165c14c54
-
SHA512
502ec3ea1f88f37a8c5059095e7da5a59a0ad69e0aff95038f75ad844a124b273a4600f0a1689818969afb074e4ffafe8ce0f48060eff3dd3d17efd9ea11b37e
-
SSDEEP
196608:vLG4DzVffy19MoKouZqOffy19MoKo/iffy19MoKo/Che8cfffy19MoKoYSXlt78j:vL1D5Hk97/OHk97KHk97me5Hk97YMltS
Behavioral task
behavioral1
Sample
dokumen.pub_centilmen-kulb-ekici-erkek-eitim-seti-kadnlarla-tanma-rehberi-1nbsped.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
dokumen.pub_centilmen-kulb-ekici-erkek-eitim-seti-kadnlarla-tanma-rehberi-1nbsped.pdf
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
dokumen.pub_centilmen-kulb-ekici-erkek-eitim-seti-kadnlarla-tanma-rehberi-1nbsped.pdf
-
Size
11.7MB
-
MD5
992796fd38abd5c1960144558b616c33
-
SHA1
cf31add8d8c0976137ad5151dd4d0e5ecfdb225a
-
SHA256
3ceeacd954d9196e675252a56d65de3cd9984d9a3733131b55b23eb165c14c54
-
SHA512
502ec3ea1f88f37a8c5059095e7da5a59a0ad69e0aff95038f75ad844a124b273a4600f0a1689818969afb074e4ffafe8ce0f48060eff3dd3d17efd9ea11b37e
-
SSDEEP
196608:vLG4DzVffy19MoKouZqOffy19MoKo/iffy19MoKo/Che8cfffy19MoKoYSXlt78j:vL1D5Hk97/OHk97KHk97me5Hk97YMltS
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-