General
- Target CMC YENİ SİPARİŞ MD829190022052025 2000adet 02652.pdf.exe
- Size 807KB
- Sample250624-ghlrlsdk6y
- SHA256 9247f2f45db631dd50e32455deecd8bc32a05cea40bfcb4c3f3b9ebb0732eafd
- MD5 c927777851cdb42acbd6fa60c06a76ff
- SHA1 62b9abba8f8e077489be231e21d453b085927241
- SHA512 7266b65f63c51d7e6254efe4b07d4957b8ede02f63bb82e6236f9f6645466c461e1acaf3bd17e18114dae329700a88b67cea88b55831dfa6d199dea576a7bb37
- SSDEEP 12288:gvYpGASYfVsFlEIU+Yl1Cn2p84wRPXcmuLzIZ1mRb7K/MP60:gEOpxtn2+emvZ+nSMd
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Malware Config
Targets
-
- Target CMC YENİ SİPARİŞ MD829190022052025 2000adet 02652.pdf.exe
- Size 807KB
- SHA256 9247f2f45db631dd50e32455deecd8bc32a05cea40bfcb4c3f3b9ebb0732eafd
- MD5 c927777851cdb42acbd6fa60c06a76ff
- SHA1 62b9abba8f8e077489be231e21d453b085927241
- SHA512 7266b65f63c51d7e6254efe4b07d4957b8ede02f63bb82e6236f9f6645466c461e1acaf3bd17e18114dae329700a88b67cea88b55831dfa6d199dea576a7bb37
- SSDEEP 12288:gvYpGASYfVsFlEIU+Yl1Cn2p84wRPXcmuLzIZ1mRb7K/MP60:gEOpxtn2+emvZ+nSMd
- MD5 SHA1 SHA512 SSDEEP
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.