General
- Target SERVICE OF COURT ORDER - MAT- 24878 OUR REF TRF34892 LINK NO2025090565.pdf
- Size 207KB
- Sample260624-lrxyfsbs8w
- SHA256 2e2b4d83ee02e6dcfd024b5bb95cb2be6cb78c70f282899f54dda3bef93564ce
- MD5 6de0f9d711e77a9ae6fadccd3e6d2b04
- SHA1 b918d890663cdc1b45315c918d954e163f772b13
- SHA512 418e3f9be76996a773535c2f66a44457d4a0c0e5d061103b7b04e1daa155fd517cb8ac756c1aa8d30c01698c5d469a6d53df6c784078215b292ca5c938ae0af5
- SSDEEP 6144:QkacjOcwhuj05ICtIDUV+QZUd52mXQDRd65:QkaCOcwhujrCiIhUfQNd65
- TLSH T1C524026C82A16A6EF416CB70E167775E7F8DE089508CD78F4A20F35B9030B0E52796DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SERVICE OF COURT ORDER - MAT- 24878 OUR REF TRF34892 LINK NO2025090565.pdf
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
SERVICE OF COURT ORDER - MAT- 24878 OUR REF TRF34892 LINK NO2025090565.pdf
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target SERVICE OF COURT ORDER - MAT- 24878 OUR REF TRF34892 LINK NO2025090565.pdf
- Size 207KB
- SHA256 2e2b4d83ee02e6dcfd024b5bb95cb2be6cb78c70f282899f54dda3bef93564ce
- MD5 6de0f9d711e77a9ae6fadccd3e6d2b04
- SHA1 b918d890663cdc1b45315c918d954e163f772b13
- SHA512 418e3f9be76996a773535c2f66a44457d4a0c0e5d061103b7b04e1daa155fd517cb8ac756c1aa8d30c01698c5d469a6d53df6c784078215b292ca5c938ae0af5
- SSDEEP 6144:QkacjOcwhuj05ICtIDUV+QZUd52mXQDRd65:QkaCOcwhujrCiIhUfQNd65
- TLSH T1C524026C82A16A6EF416CB70E167775E7F8DE089508CD78F4A20F35B9030B0E52796DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.