General

  • Target
    Methods.zip
  • Size 25.5MB
  • Sample260626-phex3abs61
  • SHA256 6dcbd03aa8a68b6a3411895d04f4e539812fc80f3032455254bac40916a402f0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      $500DailyBTC.pdf
    • Size 102KB
    • SHA256 22bcb8a2d865d03d2c2f6124c308de5b1769e13bc6c78afd6f232ecd698947bd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      100_ Anon Online.pdf
    • Size 142KB
    • SHA256 9364d8dd7052f65751d6ec6ae39a328fcbc17ce1794a9829a18e22bc114c454f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      AbracadabrBTC.pdf
    • Size 388KB
    • SHA256 6cb299fffa24bc67d40a5c4be229b838488c3ceebf40172e88ef79bdc1ff00b6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      AffiliateMarketing.pdf
    • Size 1.6MB
    • SHA256 8708b182c1bde5b33ce9b873b9ce77b01716cb2fc2f295ed10ef23a8b0d60875
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      AlienwareSE.pdf
    • Size 325KB
    • SHA256 e67dc0fa0eae47344547412472399d42f0a6c30e6e3714691cd33107df4b041d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      Anti-Scam.pdf
    • Size 465KB
    • SHA256 48b72b46f059e4308b383f290005360c64ae2454ae231239ed404d1a013b2e54
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ApolloRevenue.pdf
    • Size 382KB
    • SHA256 b35eb55db3975eeb02b616049cfc2245c68e32104abc9ef025b51bc6c304d00b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      AppCreation.pdf
    • Size 702KB
    • SHA256 f18249abd8254eabbaea987bc651e052fbd21ae040e094c86f2209ab95d2742d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      AydenEWhoring.pdf
    • Size 273KB
    • SHA256 35e4df4712c1f5c84343e5e381e9b1544e970476f85453800b47bcb9b48c4b4d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      BTCRevenue.pdf
    • Size 366KB
    • SHA256 7a54c0fbd23007ef43f27bb6ad1ca36d35caf68fea57a8c2104af912f78dad93
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      BlackHatBanker.pdf
    • Size 222KB
    • SHA256 845ab35733e917c83cd5bf906aadfb6a9571c15fd5f615f4d782f5a42cec156f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      CPATwister.pdf
    • Size 461KB
    • SHA256 4759fee3f2a145ba8cda548baac43c033842d5997bec0a0fd7338404ec4b0994
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      CardingUniversity.pdf
    • Size 1.2MB
    • SHA256 a63c81ae53dafcc0fc5246c0497ac254a8c6e36343a08ff95a682b09b5096559
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      CashExploiter.pdf
    • Size 368KB
    • SHA256 f5a0d8160158238a2f2f1cfc31b832b025c35008bf23fda99c6192374af4c096
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      CashFlash.pdf
    • Size 392KB
    • SHA256 6e032f9b3c76c30925686f535d091aa0218f6e026bcd1fabbc4759024c86c62d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ChistianoEWhoring.pdf
    • Size 1.4MB
    • SHA256 48065c43033745dd02c88434885c428b8633a74b1ecb2eb1b5e0e75dd3283e1a
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks

static1

pdflinkevasion
Score
6/10

behavioral1

adwarediscoveryspyware
Score
3/10

behavioral2

adwarediscoveryspyware
Score
3/10

behavioral3

adwarediscoveryspyware
Score
3/10

behavioral4

adwarediscoveryspyware
Score
3/10

behavioral5

adwarediscoveryspyware
Score
3/10

behavioral6

adwarediscoveryspyware
Score
3/10

behavioral7

adwarediscoveryspyware
Score
3/10

behavioral8

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

adwarediscoveryspyware
Score
3/10

behavioral11

adwarediscoveryspyware
Score
3/10

behavioral12

adwarediscoveryspyware
Score
3/10

behavioral13

adwarediscoveryspyware
Score
3/10

behavioral14

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral15

adwarediscoveryspyware
Score
3/10

behavioral16

adwarediscoveryspyware
Score
3/10

behavioral17

adwarediscoveryspyware
Score
3/10

behavioral18

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral19

adwarediscoveryspyware
Score
3/10

behavioral20

adwarediscoveryspyware
Score
3/10

behavioral21

adwarediscoveryspyware
Score
3/10

behavioral22

adwarediscoverypersistenceransomwarespyware
Score
8/10

behavioral23

adwarediscoveryspyware
Score
3/10

behavioral24

adwarediscoveryspyware
Score
3/10

behavioral25

adwarediscoveryspyware
Score
3/10

behavioral26

adwarediscoveryspyware
Score
3/10

behavioral27

adwarediscoveryspyware
Score
3/10

behavioral28

adwarediscoveryspyware
Score
3/10

behavioral29

adwarediscoveryspyware
Score
3/10

behavioral30

adwarediscoveryspyware
Score
3/10

behavioral31

adwarediscoveryspyware
Score
3/10

behavioral32

adwarediscoveryspyware
Score
3/10