General

  • Target
    25062026_0556_Fexoglobal_CRM_API_Documentation.pdf.lnk.zip
  • Size 2KB
  • Sample260625-gnaarshx8j
  • SHA256 16a4fc7ddaa1ebd0d8604b04cf5a02168e89c5ff646c6a53fea5cfe9ceea7156
  • MD5 SHA1 SHA512 TLSH
Score
7/10

Malware Config

Targets

    • Target
      Fexoglobal_CRM_API_Credentials.pdf.lnk
    • Size 2KB
    • SHA256 d829a13a08f0c3b34dfd608c5697c16c15d26dcab3c3621d230a3e4bf74e295f
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      Fexoglobal_CRM_API_Documentation.pdf.lnk
    • Size 2KB
    • SHA256 d0e6355116245357d96f1c70c40fad11da2c3d5befe6a72fab7438f2d0a9f37a
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks