Overview

overview

8

Static

static

1

Scan001-02...df.exe

windows7-x64

8

Scan001-02...df.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04062024_0140_03062024_Scan001-020624.pdf.rar

  • Size

    1.2MB

  • Sample

    240604-b3hykahe93

  • MD5

    837abf6b010c39489122f66b799e867e

  • SHA1

    8e3b26a1d1e59c5efc006d2cd61dcdab9e29a9b5

  • SHA256

    bfcda960b0b305717e3449185ba0ed984fcdfdcb95001d1d77dec4f1041285a7

  • SHA512

    19b82171bdcd8dead8f41e888a708a184e53d81e5d8ec3c9cdb3a05b02b2202dcc4e015e881f26fc0973e256f63c2a55de7be27223acfc303305c0d6047e9d05

  • SSDEEP

    24576:jhg+MNcpcV/gJhK2IHncv0LgadqFSEJ00tqSut2/D2TzBYBPauUWk1:jhyNFuJcRcvm1dqFS408qvtGkzA8

Score
8/10
execution

Malware Config

Targets

    • Target

      Scan001-020624.pdf.bat

    • Size

      1.2MB

    • MD5

      be0878146d781214b10b7a4df40d9414

    • SHA1

      6727b5136eaf6ee83ffa3cece436d6c4ac385edf

    • SHA256

      2749845c98b6536a370d363a35455b53fba0b838ee5f18248febd5387a937fcc

    • SHA512

      21c6f81533718dca4129fb4cfd532b1f74ae0145808bfe9d6628a125cec2561e0ecd3a261cb14a13b5c2bac5815c1bc83dbddc7b3bef3a8f4527d0486bbfa5e8

    • SSDEEP

      24576:7KN5iP9xI0gWbptYv1ngisueBaP6tas7GIyoLWly4ULLROtEQHqvW:2N5iP/YWbpWdg6eBauas7GjiWEqrHqvW

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks