Overview
overview
5Static
static
52025032812...am.msg
windows7-x64
52025032812...am.msg
windows10-2004-x64
3Info Envia...ON.pdf
windows7-x64
3Info Envia...ON.pdf
windows10-2004-x64
310 Ingreso...te.pdf
windows7-x64
310 Ingreso...te.pdf
windows10-2004-x64
310 Ingreso...se.pdf
windows7-x64
310 Ingreso...se.pdf
windows10-2004-x64
310 Ingreso...um.pdf
windows7-x64
310 Ingreso...um.pdf
windows10-2004-x64
310 Ingreso...ti.pdf
windows7-x64
310 Ingreso...ti.pdf
windows10-2004-x64
310 Ingreso...ra.pdf
windows7-x64
310 Ingreso...ra.pdf
windows10-2004-x64
310 Ingreso...OE.pdf
windows7-x64
310 Ingreso...OE.pdf
windows10-2004-x64
310 Ingreso...ra.pdf
windows7-x64
310 Ingreso...ra.pdf
windows10-2004-x64
310 Ingreso...ol.pdf
windows7-x64
310 Ingreso...ol.pdf
windows10-2004-x64
3Info Envia...s.xlsx
windows7-x64
3Info Envia...s.xlsx
windows10-2004-x64
1Info Envia...ER.pdf
windows7-x64
3Info Envia...ER.pdf
windows10-2004-x64
3Info Envia...ER.pdf
windows7-x64
3Info Envia...ER.pdf
windows10-2004-x64
3Info Envia...AL.pdf
windows7-x64
3Info Envia...AL.pdf
windows10-2004-x64
3Info Envia...ed.pdf
windows7-x64
3Info Envia...ed.pdf
windows10-2004-x64
3Info Envia...10.pdf
windows7-x64
3Info Envia...10.pdf
windows10-2004-x64
3General
-
Target
20250328122946-013_RADICAD_74123-bboadam.msg
-
Size
18.1MB
-
Sample
250328-pq5hpawsbx
-
MD5
d3b2438ea83b35fee618e8b8c535f2b8
-
SHA1
47f8c99020a84d2c8e16a09b34d57929d817a8f7
-
SHA256
4726db7fa32f6c204968dd2e4d289d4235254be54fd2150cf7569f91d0b57c01
-
SHA512
6ec9a5ed837b8395fdd73e1754fe42feb341904d0cd7caf297b7ccf5d5eb66dfa8633f84212ce314210248e40cccdfa474406af2b0a8445f3912c3eaede5c0ae
-
SSDEEP
393216:36btumBR+q0PRt4IM1MXB+cNVPdVO4zlprkbRU2X0wJpkWrdnXN9X0TGyGYzRSTr:qbtumH1PZ1M8cNVP/llprwrfkOaS+qO
Behavioral task
behavioral1
Sample
20250328122946-013_RADICAD_74123-bboadam.msg
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
20250328122946-013_RADICAD_74123-bboadam.msg
Resource
win10v2004-20250313-en
Behavioral task
behavioral3
Sample
Info Enviada DIAN Acta de Visita 08112023/1.AUTORIZACION.pdf
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Info Enviada DIAN Acta de Visita 08112023/1.AUTORIZACION.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral5
Sample
10 Ingresos y Retenciones/Hocol Retefuente.pdf
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
10 Ingresos y Retenciones/Hocol Retefuente.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral7
Sample
10 Ingresos y Retenciones/NKL - Certificado Cundiboyacense.pdf
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
10 Ingresos y Retenciones/NKL - Certificado Cundiboyacense.pdf
Resource
win10v2004-20250313-en
Behavioral task
behavioral9
Sample
10 Ingresos y Retenciones/NKL - Certificado Petroleum.pdf
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
10 Ingresos y Retenciones/NKL - Certificado Petroleum.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral11
Sample
10 Ingresos y Retenciones/NKL - Certificado Vanti.pdf
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
10 Ingresos y Retenciones/NKL - Certificado Vanti.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral13
Sample
10 Ingresos y Retenciones/Trafigura.pdf
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
10 Ingresos y Retenciones/Trafigura.pdf
Resource
win10v2004-20250313-en
Behavioral task
behavioral15
Sample
10 Ingresos y Retenciones/UTOE.pdf
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
10 Ingresos y Retenciones/UTOE.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral17
Sample
10 Ingresos y Retenciones/Vetra.pdf
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
10 Ingresos y Retenciones/Vetra.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral19
Sample
10 Ingresos y Retenciones/Vitol.pdf
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
10 Ingresos y Retenciones/Vitol.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral21
Sample
Info Enviada DIAN Acta de Visita 08112023/10. Ingresos y Retenciones.xlsx
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
Info Enviada DIAN Acta de Visita 08112023/10. Ingresos y Retenciones.xlsx
Resource
win10v2004-20250314-en
Behavioral task
behavioral23
Sample
Info Enviada DIAN Acta de Visita 08112023/11.1SOP INGR OPER.pdf
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Info Enviada DIAN Acta de Visita 08112023/11.1SOP INGR OPER.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral25
Sample
Info Enviada DIAN Acta de Visita 08112023/11.2SOP INGR OPER.pdf
Resource
win7-20250207-en
Behavioral task
behavioral26
Sample
Info Enviada DIAN Acta de Visita 08112023/11.2SOP INGR OPER.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral27
Sample
Info Enviada DIAN Acta de Visita 08112023/2.EXISTENCIA REPRESENTACIN LEGAL.pdf
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
Info Enviada DIAN Acta de Visita 08112023/2.EXISTENCIA REPRESENTACIN LEGAL.pdf
Resource
win10v2004-20250314-en
Behavioral task
behavioral29
Sample
Info Enviada DIAN Acta de Visita 08112023/3.Contrato EP Buenavista ANH - UTOE_compressed.pdf
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Info Enviada DIAN Acta de Visita 08112023/3.Contrato EP Buenavista ANH - UTOE_compressed.pdf
Resource
win10v2004-20250313-en
Behavioral task
behavioral31
Sample
Info Enviada DIAN Acta de Visita 08112023/3.Contrato UTOE - Otro SI No. 10.pdf
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Info Enviada DIAN Acta de Visita 08112023/3.Contrato UTOE - Otro SI No. 10.pdf
Resource
win10v2004-20250313-en
Malware Config
Targets
-
-
Target
20250328122946-013_RADICAD_74123-bboadam.msg
-
Size
18.1MB
-
MD5
d3b2438ea83b35fee618e8b8c535f2b8
-
SHA1
47f8c99020a84d2c8e16a09b34d57929d817a8f7
-
SHA256
4726db7fa32f6c204968dd2e4d289d4235254be54fd2150cf7569f91d0b57c01
-
SHA512
6ec9a5ed837b8395fdd73e1754fe42feb341904d0cd7caf297b7ccf5d5eb66dfa8633f84212ce314210248e40cccdfa474406af2b0a8445f3912c3eaede5c0ae
-
SSDEEP
393216:36btumBR+q0PRt4IM1MXB+cNVPdVO4zlprkbRU2X0wJpkWrdnXN9X0TGyGYzRSTr:qbtumH1PZ1M8cNVP/llprwrfkOaS+qO
Score5/10-
Drops file in System32 directory
-
-
-
Target
Info Enviada DIAN Acta de Visita 08112023/1.AUTORIZACION.pdf
-
Size
121KB
-
MD5
4a5c41765548c5ec85ee4797a217ced9
-
SHA1
7ef116fe43334bab1054f53d13168d1cdd8cef44
-
SHA256
0f7f64e3d8274e017624df59274d1bd6b96a64e9a4406384cd3c4837eb75074a
-
SHA512
b39ac7a0ad15ebc8636e8be410e674934deececa85713eed2b21b4acde4d01c60094ef4b24e38ea9f45b1070cd503fb392da7db5dd7d33fd56357fd0e76c0748
-
SSDEEP
3072:j+cvfaQLBAcfZIOOOVclc4Ib73FVN5sE0gDIdsLtIy:ycnFB6TudbhVNezRy
Score3/10 -
-
-
Target
10 Ingresos y Retenciones/Hocol Retefuente.pdf
-
Size
17KB
-
MD5
8529ba4cfd0a2a524a991d934383690f
-
SHA1
e54361d2eca3624b64339fddacbfa2c04dd6a7f3
-
SHA256
1da1b807fe68f4c0e7cb918628a7b10d4d7265a5f68b82d58c85568bc3659c5d
-
SHA512
41e67f1101d01a1b3a381dc2633cfada9e6c0f0bb8594758fc8eb043c7865c16b2a28d1ff73ee31bf80161b0df30049b68a14c049a77f2e8ae7b97ed2b1ad438
-
SSDEEP
384:irMFbNZ7quiiMpG5nnYHdHGjh+a4KCBeokjXDLEIb9Ig2RM4JZD:JbNZ7qz8kdHGT0B8jTLEGCgg
Score3/10 -
-
-
Target
10 Ingresos y Retenciones/NKL - Certificado Cundiboyacense.pdf
-
Size
51KB
-
MD5
01a20e0d1875d56441c2e952dfd743aa
-
SHA1
ec29a6eb0245aed9a91d77d0a33837d2fabf14b8
-
SHA256
8257882d59a5cc0e0ecd4fd3e5895255267df7ddc6e52da5fcbf65862d59ce32
-
SHA512
ab84eebc5f567aef4fc1ce971a3f3978367c0fe13544dde41db8995ffc1866f3ba51ececcd9a2ce0443a1c62a7ca6467d09017090a5eb348508b0c49c7ec5fb3
-
SSDEEP
1536:JyOdY9Hosg/RWTYOkp6+/MkTyYazVTGvk:JyO69Hosg/Z63QRa48
Score3/10 -
-
-
Target
10 Ingresos y Retenciones/NKL - Certificado Petroleum.pdf
-
Size
31KB
-
MD5
fb8184418c70af2bf5edb7265d58e06a
-
SHA1
95f342b9a98a383c9b01726bd6d655a69698fc9f
-
SHA256
b3a193e18608ce182b1441987e8019a365d24be22ab2921794a0738a4735d32d
-
SHA512
db1408e3f93b00d48b581bbf294cafb59f98d4b28fa9bdf48f8347d8ae384a822efb4597c4f552b6eadb8f52d7f6a7099c073eb69c1b9544b0bd7cad64b5f10c
-
SSDEEP
768:m8bOESxqav8z7k+Cl5pZiS9nzU8bCAPYyHcY9v:cEhzIXZrFYypv
Score3/10 -
-
-
Target
10 Ingresos y Retenciones/NKL - Certificado Vanti.pdf
-
Size
54KB
-
MD5
b6ca228f0b99695f79799139d1473e65
-
SHA1
f3a803b438f414cffdecba1ea01edd8fcf84ec72
-
SHA256
4ec28216de7cf1c55c267352a2a270ffb8f2546114856eb6a38cd9df0e19a39c
-
SHA512
f84f9e6ff6c599026c3c77ddbf195135c7cc6a2370bc1a9a1444f8da36051e6f73032f120e764e238a6625068c57e72446febdd7f8a9457b737aeff42e8aaebc
-
SSDEEP
1536:LQBY9Hosg/RWTYOkp6+/MkTyYazVTGvzfj/:LJ9Hosg/Z63QRa47fb
Score3/10 -
-
-
Target
10 Ingresos y Retenciones/Trafigura.pdf
-
Size
6KB
-
MD5
771ccb659e36ff8cc48c3e5e7185a709
-
SHA1
75a63bfd830e466884441a26f78645d143bf6bd9
-
SHA256
e36dc537d539f500af55611bf5f9bf76f3f9ae8f92377c9bc1e5fd490e719418
-
SHA512
85915a25aaa64ea3acc615aee36a4ba7779c9e121d52444ae0ebac3f5dfe6064be43eec6edd90be06ea3aa12bc891bc1abf0c1592ce348842d41bbbc0f82f273
-
SSDEEP
192:pqmwe3CXIM0Z6Bw3LHjqLgQt8yaaAzbzrscjHk9m9Y8l:pwe3C181LDiuJaqPYcjHk9m9ll
Score3/10 -
-
-
Target
10 Ingresos y Retenciones/UTOE.pdf
-
Size
98KB
-
MD5
4c9d11f0ecfc32a7a169f11f33c2457b
-
SHA1
f66706d86cb5cb1d69a0ea5009271cd78f29352a
-
SHA256
be2991774a516976b714f13a78da389e5ac6e8fddb88e9e69961605818870a97
-
SHA512
29c3be58c6b863e343ec73ea332390c255ccc2daeb9cd437b609bd475df54d3891e281d1027e6dcfa13facb83394f5619be04f431b33b9b60d55f025c43d70aa
-
SSDEEP
1536:WZudETga8iW6Vqy5xpK8NWyrPSvGCITtEC+toj0ouLeg6UVgd3yM4I4VMFEoV:ou+s+q98YSPWdM+56sLTBq62
Score3/10 -
-
-
Target
10 Ingresos y Retenciones/Vetra.pdf
-
Size
20KB
-
MD5
cc45e419b40668639b9b0b42d26e707f
-
SHA1
7c52fe725c2ff089c9c1e75cc7d796351d8ef6c1
-
SHA256
29d98a3d98fc609dcb0dafb0755997e4ffcab2f6e0ccfc778b52b8ee9b304b2a
-
SHA512
1ecd1c868ebf0d5fe0902a0658c25ce12bad7ead00252a87db08d22b3accbedd84bdc42eb5adb49652fbc486aa270f43dcad21d3aae7cb568b58c4eed6960c71
-
SSDEEP
384:IyhUMXhyTJCXdmHPRUbVazDmEpQntKvEuo8RpiHwmy3vtAk7JnmA4jaaclav5g3t:Im0TJCXdmvSVazDnH6HwZ3vtAk7ZmA4c
Score3/10 -
-
-
Target
10 Ingresos y Retenciones/Vitol.pdf
-
Size
115KB
-
MD5
aea2cf4af1f9a7fff821e10f24ca666f
-
SHA1
cd7cda37715b93f58ddf8cd557d3c234fcfd7b49
-
SHA256
e6a10aaafccfe1e49fe93d3fc3cb0bf01f8f4003f6639f8ec7a88b193b16089c
-
SHA512
ef064f2148f439e4ac885067e432d945595e9a4e9315e3623bff75094bf682e51a7c6d898275000dcce04d4894af3c6fa00e1825e3ff2a7a3353058e218e0dd0
-
SSDEEP
3072:oJxCvUS6tKf8dscv4f3ZPZOYCuBsThSbsMccpQ/:LvUdfv4/lYThSJcb
Score3/10 -
-
-
Target
Info Enviada DIAN Acta de Visita 08112023/10. Ingresos y Retenciones.xlsx
-
Size
12KB
-
MD5
513ba491964771ebd15fd6b79ba93b2e
-
SHA1
4d738e891c001329876eaf860e969f7d4bff732b
-
SHA256
818d5c84453e2b62fda14ac69678b91d286909a971fce475d11cf217533dad9a
-
SHA512
f1a27ba8b1c62c2c088aed666894f19e3f3ad6d8dc61eae4ba72ae218287b7093a7388a05b0be2b00802465866c417612aa422f6119e5990d05111d8b948218c
-
SSDEEP
192:LtuQxwbfr/cJym7sh3psCYAMtuxCO9sCw8Kit4Oc82KmQshX65KFy82Q:bxwjIJymAhZ9kzsw8Jpc82/f2Q
Score3/10 -
-
-
Target
Info Enviada DIAN Acta de Visita 08112023/11.1SOP INGR OPER.pdf
-
Size
1.2MB
-
MD5
776b6b6eb7db44d70e4fc485455100b9
-
SHA1
1a266a046c640a7c1121f36b01aa613d75a5077d
-
SHA256
fc2695ed9fb58c525bfd3b0ad083f5784eabe9f213af67908670875aa70b920b
-
SHA512
8541dbd00ee624dcab8d6786382380a9af26928221e2262cc470df77b969ee73c3879d0d9b18a83e90837962cc370e384a4c113bf51a7d3c4c6e4a78fa207097
-
SSDEEP
24576:/+rStq5IGf7UcDc7pI29aE0Y16Kry18UoB+6irVB:/+uM5IGj27pI2UKnrC/oBHYVB
Score3/10 -
-
-
Target
Info Enviada DIAN Acta de Visita 08112023/11.2SOP INGR OPER.pdf
-
Size
397KB
-
MD5
fc7d954bcda163629db7afe31b6a9a6b
-
SHA1
edaeefebff802d2a32f2a6dc0e36473f59a6dcd1
-
SHA256
b5acd831333ae6679b11142736ebe3ef970ad4ab088b0a2a8777b39464ec09c4
-
SHA512
9f3f5bb22c84ba0c5e969abb300faf99c93dae727378d4978211af974315f7fd8728ee32f9d77d649851d44439d7d23ffb4a0b6b724135d3d1b5e8f616379b68
-
SSDEEP
6144:1dR45ymxLlo9X0JpwB+MfuswmTRawG80TpCrlvI+PI981ghyMp+qMKgOztahWJZ:1dR4gmxLhJytf+mNYklA+wOIgVOz4hyZ
Score3/10 -
-
-
Target
Info Enviada DIAN Acta de Visita 08112023/2.EXISTENCIA REPRESENTACIN LEGAL.pdf
-
Size
174KB
-
MD5
16749a6017cd4eda7abdd55dd6fb376b
-
SHA1
4e3d9465cac2c4e0e2749041c403c8c140d7259e
-
SHA256
600daabda1ee6cdcbe57b35d8ca6b0a22dbb112984ef588609929043311ada14
-
SHA512
c7dac9332ff083fb9ac6955a6b204dd6b8381cb3f9a83c7f05306cc0234d44960218881fba32162dee04a88d6be5c5b40d2e3aaad58ce41ab497b9ed3afd6a57
-
SSDEEP
1536:/vA40fUr/qvqLZpOgGphmZMTElb4baUMYC6TcJ8id7zKo07nyqHJFTC4gh6svZzK:nAAPj/aQZ0bPHg57evXHJFTDgbzg6GfD
Score3/10 -
-
-
Target
Info Enviada DIAN Acta de Visita 08112023/3.Contrato EP Buenavista ANH - UTOE_compressed.pdf
-
Size
10.8MB
-
MD5
701c68d0cd8a5fd8501e1f12e8bb40b7
-
SHA1
2582d8208263a1489281c8a7ea7168b27e69bd8a
-
SHA256
e332f4ccc20b8cf28c88d35df12d7b82913507190b17eb5ae0ca165bba5c046e
-
SHA512
54da58375fe23fa8ad603fac3f03d1177cf6910133f3fb16ac7eee844674e648d762235e297f0056b7a88b191768eb925655f99be4a5d4d0334e5de0d0dc3ca5
-
SSDEEP
196608:IJQFcVoKIk3VyULCwNzjlHAZZEgk5H0kWiCmgYVN6oyUDM/XKcs7HmbGeNY4d:kQq2hk34UvzjlHi695HczmlVBM/XJsLK
Score3/10 -
-
-
Target
Info Enviada DIAN Acta de Visita 08112023/3.Contrato UTOE - Otro SI No. 10.pdf
-
Size
118KB
-
MD5
33f05cdedc6cdfa4c73447698d24c1f8
-
SHA1
4543780658901fd44121872baa418a52f21255bc
-
SHA256
54e7046dca0e0f1f7ed81bb8cf1f43d9151ca1cb1811d4519298cbfa80d260fc
-
SHA512
92c5533b72be3a144d5c480ff1e86a49561ab00997883d60181cbc75cb3a7f84ff458b9936d20213057db8041ca28e9e7c441640d3fb499d437f21185df66e78
-
SSDEEP
3072:D2kwsCYJ7UI7Tn1o8NybVhZpghn5LNmRuieuwW1A8X06UF8fhKC4G:zCYOMTntMbVhnW7mzlXaS06UF8Z9
Score3/10 -