General
- Target TEKLİF20250812.2025.pdf.exe
- Size 720KB
- Sample250814-qb3afstp14
- SHA256 d18b33fc8e8aad80c50bc4ea73a9c77b60abbf18e6c41623edecb962d9eab3bd
- MD5 b96f1517b20e0852d405c1b2834c8a06
- SHA1 1ec8d67c6c80a3c0ba30a743ff5f87a33491932f
- SHA512 2c95b02d5839e7f0725b6cf34f2065e869d0487f801bd871c34455909a096ccff6a48697d21a1e101cbcb86a4c4b8b84ba2221f56b28b5772bfc719242d81ca9
- SSDEEP 12288:rznnfCsADUmdAn6n1GnuS+Gdly4dP7Cl91sDXqHi:Pnnf3Aw0a6n1oP+Gt1osDXqH
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TEKLİF20250812.2025.pdf.exe
Resource
win10v2004-20250619-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target TEKLİF20250812.2025.pdf.exe
- Size 720KB
- SHA256 d18b33fc8e8aad80c50bc4ea73a9c77b60abbf18e6c41623edecb962d9eab3bd
- MD5 b96f1517b20e0852d405c1b2834c8a06
- SHA1 1ec8d67c6c80a3c0ba30a743ff5f87a33491932f
- SHA512 2c95b02d5839e7f0725b6cf34f2065e869d0487f801bd871c34455909a096ccff6a48697d21a1e101cbcb86a4c4b8b84ba2221f56b28b5772bfc719242d81ca9
- SSDEEP 12288:rznnfCsADUmdAn6n1GnuS+Gdly4dP7Cl91sDXqHi:Pnnf3Aw0a6n1oP+Gt1osDXqH
- MD5 SHA1 SHA512 SSDEEP
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.