Resubmissions

24/02/2025, 15:36

250224-s1z8haznw7 10

24/02/2025, 15:30

250224-sxsdgszmt4 4

Analysis

  • max time kernel
    300s
  • max time network
    184s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250217-uk
  • resource tags

    arch:x64arch:x86image:win10v2004-20250217-uklocale:uk-uaos:windows10-2004-x64systemwindows
  • submitted
    24/02/2025, 15:30

General

  • Target

    Quote_7902132_Middle_East_02 pdf.exe

  • Size

    1.1MB

  • MD5

    4d7594ca2c229b411c198834af374edf

  • SHA1

    aea3adcec03b68965f3b5a90637b7a0f3b9fc135

  • SHA256

    490e047277ae754fa21e7978a6e79a43315d7633799d5a30f8063e6a58213b15

  • SHA512

    611efdacb7768d21fb53c77e3213ec9f8c1d6b639cf0be20e28a67f2425366ef7298775819cfc0acac5c6f6ecdd7545015c19163ac8894cd461cf8a562faee60

  • SSDEEP

    24576:VYVq0sxCJTFLubljPEATFsjq5c3SddFDykNTwdQG9ikk:sq0aC3uljMAZl5kSdzDPwZij

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Quote_7902132_Middle_East_02 pdf.exe
    "C:\Users\Admin\AppData\Local\Temp\Quote_7902132_Middle_East_02 pdf.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    PID:5092

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads