General
- Target Quotation for Industrial Engineering Services-8765234567887_pdf.js
- Size 784KB
- Sample260605-jd83fsdv2k
- SHA256 2e2ee193c322ad694600f31af19e5eeca1233bc284a8174d7ed0adaca37890b4
- MD5 476a38987b9e9c39d7f567b4b99cd598
- SHA1 d397ca236de7613e275bf0a55380ed72139c36ee
- SHA512 9b70cf15e8828a1df4a674558760a43c79826f642a0147d82e22c9555985bb0cbb26414ab7c72046dcbe786b3cab38a41f2ab4ab6e269822513a96e5cac739d4
- SSDEEP 3072:lCQoJ7+7WBc5PpoVmB57yNTw6ZJf+6e9htxwehByFs8rZnYvp1mH5HYhUWH7tbTW:rkcE
- TLSH T16205D53DCC55012EE132D929C5A6049FA8936607633CE81B20CF775BAF63886B79739D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Quotation for Industrial Engineering Services-8765234567887_pdf.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quotation for Industrial Engineering Services-8765234567887_pdf.js
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Quotation for Industrial Engineering Services-8765234567887_pdf.js
- Size 784KB
- SHA256 2e2ee193c322ad694600f31af19e5eeca1233bc284a8174d7ed0adaca37890b4
- MD5 476a38987b9e9c39d7f567b4b99cd598
- SHA1 d397ca236de7613e275bf0a55380ed72139c36ee
- SHA512 9b70cf15e8828a1df4a674558760a43c79826f642a0147d82e22c9555985bb0cbb26414ab7c72046dcbe786b3cab38a41f2ab4ab6e269822513a96e5cac739d4
- SSDEEP 3072:lCQoJ7+7WBc5PpoVmB57yNTw6ZJf+6e9htxwehByFs8rZnYvp1mH5HYhUWH7tbTW:rkcE
- TLSH T16205D53DCC55012EE132D929C5A6049FA8936607633CE81B20CF775BAF63886B79739D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.