123ca74f1d9820035a3211f520ce0ccf6c8de29c8de600f5b71e47c1d8f9420a

Sharing

Copy URL Twitter E-mail

General

Target
s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249.zip
Size 34.9MB
Sample260622-k9zz4abs3s
SHA256 123ca74f1d9820035a3211f520ce0ccf6c8de29c8de600f5b71e47c1d8f9420a
MD5 17bcf2e7b7ac9bc5f3178f2efa706c65
SHA1 815b8b461524e6c13855d3f57640535e09db8cef
SHA512 7b9eb31412325cb99dc714f17cbaa10bfd709d8f9046eb3b734ce20c70539bceeea9dc96e393bdfd52724a642e13b9b661041f37bf06f2127f9ad32d20c457d7
SSDEEP 786432:l6VNABrdOX14Xf7b6pVmSJOiHH0ZfztM3ZngwFMZW/Qahx+Hz9:l6qdVf6TOlzCOsMZWoaDYp
TLSH
T14A873371D8C82B09CFDFD83181E7DA6DA18125ED574902C393E462C8E8BF7E5287A587
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249.zip
- Size 34.9MB
- SHA256 123ca74f1d9820035a3211f520ce0ccf6c8de29c8de600f5b71e47c1d8f9420a
- MD5 17bcf2e7b7ac9bc5f3178f2efa706c65
- SHA1 815b8b461524e6c13855d3f57640535e09db8cef
- SHA512 7b9eb31412325cb99dc714f17cbaa10bfd709d8f9046eb3b734ce20c70539bceeea9dc96e393bdfd52724a642e13b9b661041f37bf06f2127f9ad32d20c457d7
- SSDEEP 786432:l6VNABrdOX14Xf7b6pVmSJOiHH0ZfztM3ZngwFMZW/Qahx+Hz9:l6qdVf6TOlzCOsMZWoaDYp
- TLSH
  T14A873371D8C82B09CFDFD83181E7DA6DA18125ED574902C393E462C8E8BF7E5287A587
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/CLI/26-010-04_I300CLI.pdf
- Size 2.0MB
- SHA256 10e23a229bf5db9214f8f18bb78bfee15b290a411daa891aa089b439abf58172
- MD5 93e1238ccc5b8227c1ff2c4f210a7637
- SHA1 85591430c59fc535ee1d6213c23321ced8fbb36f
- SHA512 3db23e55a52d498ac87c08331dd9e48b119f764ffabf4322619bad6818df3c646b4f604194260ea7965032b134cd79af1cb1cec1a9e0aa80e7eebe9d831ede9b
- SSDEEP 49152:cjKtSvSII7oTEkuRK96zRV/tpwpm2cAtwItgqA34px47o1b:cjKStAkuRK9+1pAvcAtwbn4pxb1b
- TLSH
  T1FAA51211628A4C8CE0D353E5E3627877419EB6A361C75C0AB8AC47D34F42F5B67A8FD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/CLI/MO/26-010-04_MD001.v00_I300CLI_N1 NL0.pdf
- Size 183KB
- SHA256 aa24c9496a76b7951bc6f04f5c4c41696c0814016930dec7a4a953ced7242f34
- MD5 11834739971bf0f2e24603f66c697502
- SHA1 ed29048a6e2b9af3859ecc7fe25b7931541e4a62
- SHA512 9569b045cbad10e2a92522fe04b4a9dbd5ec4886023433bc97116ec87622eb76fcb0aab268f343fd82e38ea384e52cbf5cf79d3526db021d06fc7c67a1f46417
- SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmjZnNbG2oBS8xnJ4InV1l+WIdFN:MOoYu6jZ1GFQ8lJP2FN
- TLSH
  T16404C0090589D70DFEA3D8F7EB6AD125F81573178E80D5212E29021D9EE3EA2B7C3719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/ELE/26-010-04_I200ELE.pdf
- Size 3.6MB
- SHA256 03dae70b1eb697afe42eacbebe9c1c1601768ec042bf73eae52e7851435cfed5
- MD5 37cbffdb9cee587f07bed8e40b6d6264
- SHA1 1ecbf622bcc6b892bb032d97bdb5dc29233599d5
- SHA512 5c09c36eab40876fd3b262a69ea18165565761ed34640eda3a95f7b9d7fb1cbb4b905b4e90e2740cb06c1a820f520dcec2a2e49236ecb5b6c3b83780537c7ecb
- SSDEEP 98304:q7FoAD1WVqOAP9tdoKEqqmSRb9CGQE59zURAVvl:4c+P9AFJREe/jd
- TLSH
  T184062315A1C05C4CD5D2D3F693A27C25924EB1AA61D78C12B0FC4BEB8B91F0B4BD2FA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/ELE/MO/26-010-04_MD001.v00_I200CLI_OF N1 NL0.xlsx
- Size 57KB
- SHA256 6a126bc168a10a7a88472276d64ae5787a9edf7271fad8a41524fb1bbea7ac81
- MD5 e308aa050421f553868b7bef36ea2d32
- SHA1 d4efe161be9805a25b237cf4092b89e8146eb614
- SHA512 fda55ebefc0cd2d196f7dbcb70da145c3bb3b80c97c0b43e879377a9e8c3e94a0e661f047ac79c0116976d3909c8a6f3f2766383637f1b5906d04e3f13fccc32
- SSDEEP 768:IlAnD7w513ENJoIP6D2/pmE1TEfi6v8zE/jd2fwaGmf+M8fMMbayJ013IjrPO6QK:w8DbSISD2RoEzEZm+Pbi4HPPQDlAK2df
- TLSH
  T14843012F8FA6A350EAF5107C395D79EAB22ED489581AF90DF535A6393B0ADC707F4004
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/ELE/MO/26-010-04_MD001.v00_I200ELE_OF N1 NL0.pdf
- Size 139KB
- SHA256 1fd33a827e8ffae483998fd071047c85a394e3d3809de7c212c432851a589b66
- MD5 6aa6a54b4597fce7c1aad1f6af6303f2
- SHA1 5e2c9c926a0d17d6ae3aaffe90130c675bdbb82c
- SHA512 53cff8cb9750816c2e1ab777ad99a4e995a109a985fe5cd9837c797a8297ba4998a4e8e4cb52ba548d81c5a93ac69a2489de244a9a3ccb29b556738bc7f7d450
- SSDEEP 3072:b0qFC74iKiEXDix9hWgmFpHokBlSeMnd9RK5zm4x0J0gC:g8Ck3LGx9v2+kvSEzPCa
- TLSH
  T115D302E2C675A72492133956FF5591B900FB1E828144C47039FE41EB6A0ECF2BA53DB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/ELE/PL/I200ELE/26-010-04_I250ELE_EU N1 NL0.dwg
- Size 719KB
- SHA256 1fd21f8bf6286d345b681e313141a2db24a2adc1653721e004199ef50b894009
- MD5 937a75d8f2cac370909963cbe7e5a477
- SHA1 2bec0471965cab464a4a508a973205f8596fa4e8
- SHA512 0f8325d49dc0f3648009fab65b70a89434f3c46db89756981d67c5112967876d5c05cae4c9277570ea9e74127fcb664506726ef3cae959b1c82d9bb93a240558
- SSDEEP 12288:xdFnqQXbkWVubhKkbIdZWYxyltbY43LOmAO6+MaD:jFL4/9v8x4tbY4iO9TD
- TLSH
  T1AFF412135B1EB406F609B1B90F924F239A83EC83B7503B52E64F457CF489F849695BCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/MEG/MO/26-010-04_MD001.v00_I600MEG_N1 NL0.pdf
- Size 169KB
- SHA256 c9dcbcac3a7b8cc76da79149d389d747a9f8f6adc9bab6ef7f9f8275a7e2fd07
- MD5 df577f70dc4122639c8b83f452afd369
- SHA1 32b9bd7b9e9305a04ddb4cddf8d72cddfe90753d
- SHA512 cec76a568c206ff1f9d1c16ffb7e9925ecb91c80d2b870f7f07ed84d5e7b5a306791b0798ce39a0b42f289d53438d538f4dda1dfae1af78afc38ff041018d931
- SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmjHNbG2oBS8xnJ4InV1EkdsS:MOoYu6jVGFQ8lJPEkt
- TLSH
  T1F704C009054DC74DFFE3E8F6EB6AE115F815B713CE80D5211E19021D9AA3AA2B7C3729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/MEG/MO/26-010-04_MD001.v00_I600MEG_N1 NL0.xlsx
- Size 12KB
- SHA256 68a25b4cb0833743cfae35c85c29555cd9eb6eb0d17c4c9cb1fd7e2443c4e04d
- MD5 2c31447cdb5e48504022cb881edcb9ea
- SHA1 4d6fd65066caf92b2a24fde44357d4980cdc4664
- SHA512 c5e90bfaea68fbfb638bcb6f39dd3221f02363c5ebc990f0830be9619730fa83a8746e194883d2e800566386cfe365eda7c2c9293b21049a3f17f0981bfde60b
- SSDEEP 384:tLIabYgjc+Qogr0AXw7ocs2Z1AZELdg7iu:Vf1jc+ar0A8U4eqmOu
- TLSH
  T1A842BF08A2626D28C387A5FDA495463B81CE786A9F31B3136DDDF1244FB31054BAB0E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/SANE/26-010-04_I100SAN.pdf
- Size 250KB
- SHA256 1ba0dc93050748197d425f2c05a51055775cee72507b0ccf99111c57f44fd9cf
- MD5 5fd00ffb7bc8fe98d38f3aeb5262a233
- SHA1 328b0130ed97e35a1d692533f81122588b177e83
- SHA512 954d29d05af874d400170e5925c74d0168facb5b471411f2fc0078ed98e463ec6084d9314b54afb0a645ed9814ac14c9e992441110a28f144d8f399bfd617c8c
- SSDEEP 6144:LRco6dczmovTWqQ657YhhfhhDVYfpp321fG4H2j+jSXwx:p8czmohocfpae4HNjSAx
- TLSH
  T14544026660805CCEC0F74BF593467C36861E7AD752CE5C0274AD0AC69F81F5A4FB2A93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/SANE/MO/26-010-04_MD001.v00_I100SAN_N1 NL0.pdf
- Size 160KB
- SHA256 1a3e16c30e2bca15e4f67563b7b1a2ae1558e2c31a1e530a3751aff59cd135b6
- MD5 a5201a72f221888017269d02f323aed1
- SHA1 4303af02b34ac96fbacff8e7996a3911f0870f10
- SHA512 c76ac8eeb00e09540446a1efaf1c6d46362849d4acee9bd6c6765bd382218d0ef9f630bf579064307f16092df7263c86690129c8099db8431c1df60ce5794420
- SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmj+NbG2oBS8xnJ4InV1S6:MOoYu6jeGFQ8lJP5
- TLSH
  T1E5F3C008444DC34DFFE3A8F6EB6AE125F815A717C990D5212E15031D9EA3EA2B7C3729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/TEL/MO/26-010-04_MD001.v00_I600TEL_N1 NL0.pdf
- Size 166KB
- SHA256 c58582493e413746dde03f127d14cae0c55aa5876f974f5ca3bb89e4c807ab73
- MD5 f7e41ab35fbaf2f882147328abaf713e
- SHA1 e9e158efd2b3aab27738cc9df47c72e10df6bcc1
- SHA512 8849385aac1828005a7847bac353fac7e13e7f46af5b563a717996102e44a9d2317fbc55cebfb84ac1ac66c6144ad159c1464e544313a7e75a460abff36f7f9d
- SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmjhNbG2oBS8xnJ4InV1pxJk:MOoYu6jbGFQ8lJPvO
- TLSH
  T1D3F3D008084DC74DFFA3A8F7EB6AD125F815A717C990D5212E15021D9AA3EA2B7C3729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249/PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/TEL/MO/26-010-04_MD001.v00_I600TEL_N1 NL0.xlsx
- Size 15KB
- SHA256 00c2f915215165222b7291db9ae2f556a3dc771c749e6247cd6f790915bce3fa
- MD5 3f0fc3aa7566a63fea1d26f2a879d55a
- SHA1 e05269341d9086b06e7ec9f4cacbb4f89c0151ac
- SHA512 0e9f80f644e517c520f6dad195eca05ad32d91c9d66982b036bf02639cb205c9949b054029c395c4e928e1c6a52a7f8b2b927e073f581c46d835f4d7cf83c3a8
- SSDEEP 384:qLIRbigKyV5mG8gLGo8OIaMM0RQshHjMq8Ry/euqjg78s:6k7t3SOGoaptQseymR88s
- TLSH
  T1D162D09CB6113FB2D30691342862040B7B99C57AFE84265FA0203F5ECB718E812A7C3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26