General

  • Target
    561-749.zip
  • Size 6.0MB
  • Sample260625-alf7zagw2s
  • SHA256 57130a61aba0a8e5cbe5254f188bd2540e682bda99d9a3e1bd6f6d21d50acf2e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      A-3716-2021.pdf
    • Size 41KB
    • SHA256 2c05ca2a5ad0d08c480456180e4b5edf2cddf4bf33b83c26afd9cf1540b799b8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      A-3717-2021.pdf
    • Size 40KB
    • SHA256 32534137a107f3d75c540aca5cf744bc3e5dbfbc93d2dc3f5f0d0a936998c6e9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      A-3718-2021.pdf
    • Size 40KB
    • SHA256 31f35866abc6f4deab912c92e34e1fd0a4f1a225d3cc9764c303edcb7a944c74
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      A-3720-2021-CN-567.pdf
    • Size 41KB
    • SHA256 40b9b19b3779d59cbc15183ed856b50f1b51a9c5ff5f67d7d9bc0578dd2deb8b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      A-3720-2021.pdf
    • Size 40KB
    • SHA256 c4ea2c7249d02af068475231d4ddf820abd755a24413f8c6a64b784e1fab6137
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      A-3722-2021.pdf
    • Size 40KB
    • SHA256 6417d29d7f69dfd198b8672479d24bbfe33317ab972a6a80f1ae044e48ead662
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      A-3724-2021.pdf
    • Size 40KB
    • SHA256 5a3d967bb257964108809bffe74685ee139584985f9384c8cc4a745da787e873
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      A-3725-2021.pdf
    • Size 40KB
    • SHA256 131df2126f676f523333b2630bca6c762574fcdeb24f514f284003f3342c2606
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      A-3727-2021.pdf
    • Size 40KB
    • SHA256 7d5cfcab42e19ae857b3218587a2dc9f9126587879730f541c64c73fd981ad38
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      A-3728-2021.pdf
    • Size 40KB
    • SHA256 2aa3050f89e64cffcd78ce841a4ac7d86fa9a01f9c288036ed4ab5a28fd8a8f7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      A-3729-2021.pdf
    • Size 41KB
    • SHA256 53163316034b7ffb8fdbfbedf06219c7bf697d65b9906e5ad8f5890647ff1cb0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      A-3730-2021.pdf
    • Size 41KB
    • SHA256 bcb7261e9bd66a29ef2de492f5ad211f9b24a1a50184aeb5d2ade097c8264948
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Target
      A-3731-2021.pdf
    • Size 40KB
    • SHA256 f9c3d99bab8fbe46c30ac8503fb1448a5ab372575eff7b44f7816dd4b9fed029
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      A-3732-2021.pdf
    • Size 40KB
    • SHA256 a1b0ec08ac7b9925cdf8019a58d8763c8d32da179f977ebd25a51cf45dd3d559
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      A-3733-2021.pdf
    • Size 40KB
    • SHA256 da69ac6ed384803aadd08d706719a117ee10c024295ac83482c5160e560dc8b8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      A-3734-2021.pdf
    • Size 41KB
    • SHA256 64636ed98ced7d6cfdc7e6c7080bf205d4202021efaf20c18cfb5326451d3f00
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks

static1

pdf
Score
5/10

behavioral1

adwarediscoveryspyware
Score
3/10

behavioral2

adwarediscoveryspyware
Score
3/10

behavioral3

adwarediscoveryspyware
Score
3/10

behavioral4

adwarediscoveryspyware
Score
3/10

behavioral5

adwarediscoveryspyware
Score
3/10

behavioral6

adwarediscoveryspyware
Score
3/10

behavioral7

adwarediscoveryspyware
Score
3/10

behavioral8

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral11

adwarediscoveryspyware
Score
3/10

behavioral12

adwarediscoveryspyware
Score
3/10

behavioral13

adwarediscoveryspyware
Score
3/10

behavioral14

adwarediscoveryspyware
Score
3/10

behavioral15

adwarediscoveryspyware
Score
3/10

behavioral16

adwarediscoveryspyware
Score
3/10

behavioral17

adwarediscoveryspyware
Score
3/10

behavioral18

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral19

adwarediscoveryspyware
Score
3/10

behavioral20

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral21

adwarediscoveryspyware
Score
3/10

behavioral22

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral23

adwarediscoveryspyware
Score
3/10

behavioral24

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral25

adwarediscoveryspyware
Score
3/10

behavioral26

adwarediscoveryspyware
Score
3/10

behavioral27

adwarediscoveryspyware
Score
3/10

behavioral28

adwarediscoveryspyware
Score
3/10

behavioral29

adwarediscoveryspyware
Score
3/10

behavioral30

adwarediscoveryspyware
Score
3/10

behavioral31

adwarediscoveryspyware
Score
3/10

behavioral32

adwarediscoveryspyware
Score
3/10