e3a0f9ead7c0d1a18cf471ecab07abc792e65e9d98037b7b23924b27cbbeda07

Sharing

Copy URL Twitter E-mail

General

Target
20260420-LPA-Finance-Complete-Pack.zip
Size 2.1MB
Sample260625-pfe52sbv8t
SHA256 e3a0f9ead7c0d1a18cf471ecab07abc792e65e9d98037b7b23924b27cbbeda07
MD5 b1eb24326eb20c96059154ab4bddbbda
SHA1 e9580539d3523c7e7190c7dc407de1435e297236
SHA512 1e17bd9074298f5d735a586e0aced9e3c5aff4aebaee2ad8955b054fc7c7dffcbc10e9d494b3f9b71c9e8c7797f5d8f793d9fe52482d4560573af33f4a9f5227
SSDEEP 49152:bIMThXO0gU6ew4WY8kdbH9U3l9F+yjfwwiZ0YbwF:b/The0N6D4MMS3h+yaZTwF
TLSH
T148A53333CA692A8BC9F5D2B10060252446B5A2F09FDB30F62A574B4596FB52DB0D7C3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  102025-LP1F-Lasting-power-of-attorney-financial-decisions.pdf
- Size 775KB
- SHA256 fcc3ffb8d041d8bff67fb073733549b07dd9fa6a29ee69abc9797f49c30b1f71
- MD5 436e6499b815b4f0f3de417913d123d9
- SHA1 bf3de6592b2d6a4283bd68ff05181600b91a1e9c
- SHA512 c21eaae4ef42867c8c5851155abf0e26c64f7bf9c804a6775566b1652e8cf0e0c3136891dc1d3b34f3a35dfd681fdd90db63b4744e3ec7e65b910c7dd196f16f
- SSDEEP 12288:GhV80vQ8u/H6knpvSdO5KH2hkJtNpoqw3Q8u/H6knpvSdO5t:Y80vQ8u/aoYOYWmJpoL3Q8u/aoYOj
- TLSH
  T1E5F47B71FBE7DAA4430F424C622C3C7367CA25EA5AC4140BFA9F4D509B55FA280936BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  20250821-LP12-Make-and-register-your-lasting-power-of-attorney-a-guide.pdf
- Size 1.2MB
- SHA256 4d699747ab0851c9208b106f4f25e327e15d1625233a8d09440989bf5a019b37
- MD5 825d03d8423b48f1bbde2244c0099fd9
- SHA1 a3fb94dc7c449f3dbf242af68c6ec8d65a9f01fe
- SHA512 e82ce876ef29da78b4e024481d0b0fffaa380a8940c736bb893fcbd0ec35a20de779e13d76ef36738c1bf70178efadcfcf534d73aa891bfd858e394cfc49324d
- SSDEEP 24576:nQ8u/aoYOVapcQVKCfTh0eF/t8Cce22ydMk1IPVW:nleaoYOVapJNfTh0eF/my2NdM1VW
- TLSH
  T18B45F063E3C2C719530F4B9C7A6E1D3B479499D860CA2667B10F8D8B7781F7048AA27D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  20260420-lpa120-get-help-with-paying-lpa-fees.pdf
- Size 492KB
- SHA256 099294912f0ae402d6ef89a80a0ba2e07e7532067dfcdfa3d73f5c457d5532ac
- MD5 0d6e7fe0690de7d97b7565846e4d6896
- SHA1 dfc63d4a1d18e3e00e1d17a9faf890845f1e965d
- SHA512 88b1eeaaf2fab19d3fae1a946f5c78e62bf74f299325194800a95aa3642be448a50c536814f2a1dc44171e3ea63e47e348857cc91033e2fb12a0734c8e5d0480
- SSDEEP 12288:ycpG4PjAW1qVcpQvEpJUoAZalsQSJQUlyv1LD:yeVUcpnUl0aVwtD
- TLSH
  T1FCB402D8869FA4C804A08BA477068563478E89FB6E5D201F3D4CC6B18743FD7D4AFBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  lp3-form-to-notify-people.pdf
- Size 138KB
- SHA256 95b6b149f4e7f8b18ec9b25380a60f3677a04f22ed595da5b882ce430c6effea
- MD5 e9680acac9310f6e4962012e4b4713f3
- SHA1 16264a0eae602e10fb541b05bcf16728872b8d87
- SHA512 af96b536082940f5f606bdd3736f518558fa3ef0acdb36039905890002c10a8c2724bf0442f454eb0e0d3655cb174fbd6fc1532b03a5527d3fddf6f29846ebf8
- SSDEEP 1536:VVzXM7ZednvGb0ZKYi3klB/fdo0jbYdeJye/BVP9RBv09U+lWtiGZvP2SJb55:3zDvG/6BaocMJyyVRB0UO6zvuSR
- TLSH
  T190D34B666FF65CA0C11EC2555388385979CB34DFEAF02D0BFACE0E94DF10A5291CB64A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  lpc-continuation-sheets.pdf
- Size 177KB
- SHA256 eac38662b6ae1209e70958d5090fa00a18bc1d951b4db17fabb6453609842fe4
- MD5 03199968b7ad533c27fc8dc4b76f39e3
- SHA1 06dc397dc259b49ab3593c0d1a46ae933f2faaa3
- SHA512 ce5b83ae24430df30a126d7758ee7294ba59610db4d55d66111102845b6d5b96cc21046b2dde7591d2612e53e8fe0bbd32926384c346a3bb2309ecd328125d7c
- SSDEEP 1536:hzXQZhunnDK2KEtZrzbAn9Sv77+XyUYPYMMu7s09DR5PSGw1kl6mZkibz2QgZGeg:hzbt7UnwD7vLDxn1MqZtXwgO1tH6
- TLSH
  T186043AA16BF758A0C11DC254630C395AA6CF35EFAEE5290BFE5C49A0CB11E87D0D7386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10