General
- Target FortradeFX_CRM_API_Documentation.pdf.lnk
- Size 2KB
- Sample260623-n8xp5acv3j
- SHA256 42433b147937ac7a092aefecbd9981b3f7d7c6d0f58d548787c5f93978ee48f6
- MD5 52b2c49912b29719349a8ac1cd058126
- SHA1 5716c640fbea2994f5eae934887b8898745639cc
- SHA512 2674fd8a002d58d2f838c884d585bfe85ff3b192bb1e8e828dadce3077589601608fe066e28fc4f59b1fa5f77420be7c254f55aa55a0d4edf2a315a55df7d1a4
- TLSH T1005189206FFA1330F3B69EBD98F9635198777996EE72CB4C0061064D0563E419DA2F2B
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
FortradeFX_CRM_API_Documentation.pdf.lnk
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
FortradeFX_CRM_API_Documentation.pdf.lnk
Resource
win11ltsc2024-20260617-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target FortradeFX_CRM_API_Documentation.pdf.lnk
- Size 2KB
- SHA256 42433b147937ac7a092aefecbd9981b3f7d7c6d0f58d548787c5f93978ee48f6
- MD5 52b2c49912b29719349a8ac1cd058126
- SHA1 5716c640fbea2994f5eae934887b8898745639cc
- SHA512 2674fd8a002d58d2f838c884d585bfe85ff3b192bb1e8e828dadce3077589601608fe066e28fc4f59b1fa5f77420be7c254f55aa55a0d4edf2a315a55df7d1a4
- TLSH T1005189206FFA1330F3B69EBD98F9635198777996EE72CB4C0061064D0563E419DA2F2B
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.