General

  • Target
    Bper Banca_Copia del Pagamento.pdf.bat
  • Size 420KB
  • Sample250324-jv2ppstwct
  • SHA256 ced40caee716f956a4db4d96f10daa8b80f6c30371f2490129b6cf212dcfd223
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      Bper Banca_Copia del Pagamento.pdf.bat
    • Size 420KB
    • SHA256 ced40caee716f956a4db4d96f10daa8b80f6c30371f2490129b6cf212dcfd223
    • MD5 SHA1 SHA512 SSDEEP
    • Accesses Microsoft Outlook profiles

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks