55552c376025d52b192b1ca484366790ac3901c1a9334513a166c6b9fbd7fddb

Sharing

Copy URL Twitter E-mail

General

Target
wetransfer_s01591-r258-zaragoza-pe-oficina-exportacion-instalaciones_2026-06-19_1249.zip
Size 50.9MB
Sample260625-wvddbset9p
SHA256 55552c376025d52b192b1ca484366790ac3901c1a9334513a166c6b9fbd7fddb
MD5 4c4e31203ee1fd6156205350d473a330
SHA1 15c6775b2fa023ed9739d9cd313cd54288a489f1
SHA512 49c058c4254db3a81af983c7bf8031afdb2ea1c91afcde429dc2e574deae72f242bc501a23971bc2895ff47f30266b9264cb8ce9a7187bf57e7416f54fcae249
SSDEEP 393216:a7UdLdkhueM11TOZjMoxhIBEB8XQNRhU0HX9L9CFvbQIsuWF9Gqu9uE1GrF0/sLB:aJuL/W+CRhjL4FTgO0JZ5jcKS3AT5
TLSH
T19BC71262CB63D044F8B67AB082647A4BFF6B781FF2400B15B44F76F41171D9B43AA686
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/BMS/26-010-04_I800BMS.pdf
- Size 403KB
- SHA256 0672ec78b2e96840432bc5ae763f3a32284995452a4c71b350fe3c09191185a9
- MD5 cb10fbd14f85a4900288aa41c8f17f8f
- SHA1 447d0dc3cf2d6d0d26dfb2a69141e94a3c157cd6
- SHA512 29e85be162b44ffcd79b9ae94058b19e744d6a4c9c928c206cee74ee18f75c67baada215a25d90988775db0e1436457b6287904ec0a085280bad1333ecc46d02
- SSDEEP 12288:8cWggeaUgUgQq+u1uQ8TnDstV2S/LBhGiMe:8vXUgQUL8TnD3SthGy
- TLSH
  T1C794129191C71C9DE2E39BA183F63D730189B29612D88E1B75ADCBA25701F0F0F9A747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/CLI/26-010-04_I300CLI.pdf
- Size 2.0MB
- SHA256 10e23a229bf5db9214f8f18bb78bfee15b290a411daa891aa089b439abf58172
- MD5 93e1238ccc5b8227c1ff2c4f210a7637
- SHA1 85591430c59fc535ee1d6213c23321ced8fbb36f
- SHA512 3db23e55a52d498ac87c08331dd9e48b119f764ffabf4322619bad6818df3c646b4f604194260ea7965032b134cd79af1cb1cec1a9e0aa80e7eebe9d831ede9b
- SSDEEP 49152:cjKtSvSII7oTEkuRK96zRV/tpwpm2cAtwItgqA34px47o1b:cjKStAkuRK9+1pAvcAtwbn4pxb1b
- TLSH
  T1FAA51211628A4C8CE0D353E5E3627877419EB6A361C75C0AB8AC47D34F42F5B67A8FD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/CLI/MO/26-010-04_MD001.v00_I300CLI_N1 NL0.pdf
- Size 183KB
- SHA256 aa24c9496a76b7951bc6f04f5c4c41696c0814016930dec7a4a953ced7242f34
- MD5 11834739971bf0f2e24603f66c697502
- SHA1 ed29048a6e2b9af3859ecc7fe25b7931541e4a62
- SHA512 9569b045cbad10e2a92522fe04b4a9dbd5ec4886023433bc97116ec87622eb76fcb0aab268f343fd82e38ea384e52cbf5cf79d3526db021d06fc7c67a1f46417
- SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmjZnNbG2oBS8xnJ4InV1l+WIdFN:MOoYu6jZ1GFQ8lJP2FN
- TLSH
  T16404C0090589D70DFEA3D8F7EB6AD125F81573178E80D5212E29021D9EE3EA2B7C3719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/CLI/MO/26-010-04_MD001.v01_I300CLI_OF N1 NL0.xlsx
- Size 25KB
- SHA256 ad12fd5b0004af502770c1f0180e6ef2823a31177123c2ff40159aea6e52cf24
- MD5 19867b3c2815736c642e6d674fd2f442
- SHA1 767f30c4576f4d66e3ac465faaabbcdd66a1a4fa
- SHA512 1ce2a10dc4fe871c1fc23bef76fe0f5af0d84842b4257a7b514621686e5b6ca69ec20945b0eea10058b8a7a4f296ad5d4c96813917b7dfa8e480a665c2b36625
- SSDEEP 384:lLImbogbog3tzRFUlczEcHF249QEZoOIqxsu5Kd1yExrNQ/Uy/LajzXlfMnNEAOc:drlbomtzRFTl4VOOukd1rUsPPoNERtu
- TLSH
  T152C2D10B6227C878C3436ABBA25610A0021C25B79D9DB687E500677D5F0B76614DEB3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/ELE/26-010-04_I200ELE.pdf
- Size 3.6MB
- SHA256 03dae70b1eb697afe42eacbebe9c1c1601768ec042bf73eae52e7851435cfed5
- MD5 37cbffdb9cee587f07bed8e40b6d6264
- SHA1 1ecbf622bcc6b892bb032d97bdb5dc29233599d5
- SHA512 5c09c36eab40876fd3b262a69ea18165565761ed34640eda3a95f7b9d7fb1cbb4b905b4e90e2740cb06c1a820f520dcec2a2e49236ecb5b6c3b83780537c7ecb
- SSDEEP 98304:q7FoAD1WVqOAP9tdoKEqqmSRb9CGQE59zURAVvl:4c+P9AFJREe/jd
- TLSH
  T184062315A1C05C4CD5D2D3F693A27C25924EB1AA61D78C12B0FC4BEB8B91F0B4BD2FA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/ELE/MO/26-010-04_MD001.v00_I200CLI_OF N1 NL0.xlsx
- Size 57KB
- SHA256 6a126bc168a10a7a88472276d64ae5787a9edf7271fad8a41524fb1bbea7ac81
- MD5 e308aa050421f553868b7bef36ea2d32
- SHA1 d4efe161be9805a25b237cf4092b89e8146eb614
- SHA512 fda55ebefc0cd2d196f7dbcb70da145c3bb3b80c97c0b43e879377a9e8c3e94a0e661f047ac79c0116976d3909c8a6f3f2766383637f1b5906d04e3f13fccc32
- SSDEEP 768:IlAnD7w513ENJoIP6D2/pmE1TEfi6v8zE/jd2fwaGmf+M8fMMbayJ013IjrPO6QK:w8DbSISD2RoEzEZm+Pbi4HPPQDlAK2df
- TLSH
  T14843012F8FA6A350EAF5107C395D79EAB22ED489581AF90DF535A6393B0ADC707F4004
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/ELE/MO/26-010-04_MD001.v00_I200ELE_OF N1 NL0.pdf
- Size 139KB
- SHA256 1fd33a827e8ffae483998fd071047c85a394e3d3809de7c212c432851a589b66
- MD5 6aa6a54b4597fce7c1aad1f6af6303f2
- SHA1 5e2c9c926a0d17d6ae3aaffe90130c675bdbb82c
- SHA512 53cff8cb9750816c2e1ab777ad99a4e995a109a985fe5cd9837c797a8297ba4998a4e8e4cb52ba548d81c5a93ac69a2489de244a9a3ccb29b556738bc7f7d450
- SSDEEP 3072:b0qFC74iKiEXDix9hWgmFpHokBlSeMnd9RK5zm4x0J0gC:g8Ck3LGx9v2+kvSEzPCa
- TLSH
  T115D302E2C675A72492133956FF5591B900FB1E828144C47039FE41EB6A0ECF2BA53DB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/ELE/PL/I200ELE/26-010-04_I250ELE_EU N1 NL0.dwg
- Size 719KB
- SHA256 1fd21f8bf6286d345b681e313141a2db24a2adc1653721e004199ef50b894009
- MD5 937a75d8f2cac370909963cbe7e5a477
- SHA1 2bec0471965cab464a4a508a973205f8596fa4e8
- SHA512 0f8325d49dc0f3648009fab65b70a89434f3c46db89756981d67c5112967876d5c05cae4c9277570ea9e74127fcb664506726ef3cae959b1c82d9bb93a240558
- SSDEEP 12288:xdFnqQXbkWVubhKkbIdZWYxyltbY43LOmAO6+MaD:jFL4/9v8x4tbY4iO9TD
- TLSH
  T1AFF412135B1EB406F609B1B90F924F239A83EC83B7503B52E64F457CF489F849695BCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/MEG/26-010-04_I600MEG.pdf
- Size 217KB
- SHA256 a5e40c7af729d155057b7d56066b16a9438a77bd3bf1e39e6a1ec21b38657f0e
- MD5 6714d49f886959792cc7a57d51de7e97
- SHA1 2edeec0b82e4a37233d0c644a008d13cce536a84
- SHA512 5b5c76c839fec903f9bf2dde4b752ba8f0aab0a08792e7c12c360923f3d5cdc93c69c17f68036fd5bda4e1f226826d3b825b34a43e45370f70bb74bbb1fb47fc
- SSDEEP 3072:UccPHWCnVZXDu2WaWSrT9eLkrCIndG699GlTZrOg7cdG7HnBD6rgncrAJGEasSxE:Zc2CvLsZLkeqX99+7cEMr6ta/i
- TLSH
  T139240250F0804C4CE1D28BF7A75A7D61821DF26B9AEE4D4179FC4AF29B44F4E0EE2295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/MEG/MO/26-010-04_MD001.v00_I600MEG_N1 NL0.pdf
- Size 169KB
- SHA256 c9dcbcac3a7b8cc76da79149d389d747a9f8f6adc9bab6ef7f9f8275a7e2fd07
- MD5 df577f70dc4122639c8b83f452afd369
- SHA1 32b9bd7b9e9305a04ddb4cddf8d72cddfe90753d
- SHA512 cec76a568c206ff1f9d1c16ffb7e9925ecb91c80d2b870f7f07ed84d5e7b5a306791b0798ce39a0b42f289d53438d538f4dda1dfae1af78afc38ff041018d931
- SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmjHNbG2oBS8xnJ4InV1EkdsS:MOoYu6jVGFQ8lJPEkt
- TLSH
  T1F704C009054DC74DFFE3E8F6EB6AE115F815B713CE80D5211E19021D9AA3AA2B7C3729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/MEG/MO/26-010-04_MD001.v00_I600MEG_N1 NL0.xlsx
- Size 12KB
- SHA256 68a25b4cb0833743cfae35c85c29555cd9eb6eb0d17c4c9cb1fd7e2443c4e04d
- MD5 2c31447cdb5e48504022cb881edcb9ea
- SHA1 4d6fd65066caf92b2a24fde44357d4980cdc4664
- SHA512 c5e90bfaea68fbfb638bcb6f39dd3221f02363c5ebc990f0830be9619730fa83a8746e194883d2e800566386cfe365eda7c2c9293b21049a3f17f0981bfde60b
- SSDEEP 384:tLIabYgjc+Qogr0AXw7ocs2Z1AZELdg7iu:Vf1jc+ar0A8U4eqmOu
- TLSH
  T1A842BF08A2626D28C387A5FDA495463B81CE786A9F31B3136DDDF1244FB31054BAB0E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/SANE/26-010-04_I100SAN.pdf
- Size 250KB
- SHA256 1ba0dc93050748197d425f2c05a51055775cee72507b0ccf99111c57f44fd9cf
- MD5 5fd00ffb7bc8fe98d38f3aeb5262a233
- SHA1 328b0130ed97e35a1d692533f81122588b177e83
- SHA512 954d29d05af874d400170e5925c74d0168facb5b471411f2fc0078ed98e463ec6084d9314b54afb0a645ed9814ac14c9e992441110a28f144d8f399bfd617c8c
- SSDEEP 6144:LRco6dczmovTWqQ657YhhfhhDVYfpp321fG4H2j+jSXwx:p8czmohocfpae4HNjSAx
- TLSH
  T14544026660805CCEC0F74BF593467C36861E7AD752CE5C0274AD0AC69F81F5A4FB2A93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/SANE/MO/26-010-04_MD001.v00_I100SAN_N1 NL0.pdf
- Size 160KB
- SHA256 1a3e16c30e2bca15e4f67563b7b1a2ae1558e2c31a1e530a3751aff59cd135b6
- MD5 a5201a72f221888017269d02f323aed1
- SHA1 4303af02b34ac96fbacff8e7996a3911f0870f10
- SHA512 c76ac8eeb00e09540446a1efaf1c6d46362849d4acee9bd6c6765bd382218d0ef9f630bf579064307f16092df7263c86690129c8099db8431c1df60ce5794420
- SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmj+NbG2oBS8xnJ4InV1S6:MOoYu6jeGFQ8lJP5
- TLSH
  T1E5F3C008444DC34DFFE3A8F6EB6AE125F815A717C990D5212E15031D9EA3EA2B7C3729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/SANE/MO/26-010-04_MD001.v00_I100SAN_N1 NL0.xlsx
- Size 7KB
- SHA256 a7433099bad33d05dc9cdaa7e2074008e04c2214434a675395f3d20af49e7412
- MD5 b88e16f893c561fb581144021206d29a
- SHA1 343244f79fa8b9f2e62a332c0d4379654e833927
- SHA512 b34fbe329e113f23ba38a85f1078f38552f997b28e4071df34047a80cbf0bf282d63675bda03a3bc9f5b19534a2e4dc42cc505ebe4074b3c4b8b4ff6591e2897
- SSDEEP 192:mLIlc4egQ8iX/W1oT1D7pbJAgZhPAUOAml682+aRS2Ousjlp1oK:mLIlbegBgW1C/pbigjZjml68eoR
- TLSH
  T1A7F19D5A36551020C70EDD74A9898223C21FDC319D6125C26960B3FA2F61DAACFBF57C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/TEL/MO/26-010-04_MD001.v00_I600TEL_N1 NL0.pdf
- Size 166KB
- SHA256 c58582493e413746dde03f127d14cae0c55aa5876f974f5ca3bb89e4c807ab73
- MD5 f7e41ab35fbaf2f882147328abaf713e
- SHA1 e9e158efd2b3aab27738cc9df47c72e10df6bcc1
- SHA512 8849385aac1828005a7847bac353fac7e13e7f46af5b563a717996102e44a9d2317fbc55cebfb84ac1ac66c6144ad159c1464e544313a7e75a460abff36f7f9d
- SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmjhNbG2oBS8xnJ4InV1pxJk:MOoYu6jbGFQ8lJPvO
- TLSH
  T1D3F3D008084DC74DFFA3A8F7EB6AD125F815A717C990D5212E15021D9AA3EA2B7C3729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  PE-INF0068417-Reforma oficinas interiores nave-LICIT_INST_NAVE1_NL0_V1/TEL/MO/26-010-04_MD001.v00_I600TEL_N1 NL0.xlsx
- Size 15KB
- SHA256 00c2f915215165222b7291db9ae2f556a3dc771c749e6247cd6f790915bce3fa
- MD5 3f0fc3aa7566a63fea1d26f2a879d55a
- SHA1 e05269341d9086b06e7ec9f4cacbb4f89c0151ac
- SHA512 0e9f80f644e517c520f6dad195eca05ad32d91c9d66982b036bf02639cb205c9949b054029c395c4e928e1c6a52a7f8b2b927e073f581c46d835f4d7cf83c3a8
- SSDEEP 384:qLIRbigKyV5mG8gLGo8OIaMM0RQshHjMq8Ry/euqjg78s:6k7t3SOGoaptQseymR88s
- TLSH
  T1D162D09CB6113FB2D30691342862040B7B99C57AFE84265FA0203F5ECB718E812A7C3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32