Overview
overview
8Static
static
6$500DailyBTC.pdf
windows10-2004-x64
3$500DailyBTC.pdf
windows11-ltsc_2024-x64
3100_ Anon Online.pdf
windows10-2004-x64
3100_ Anon Online.pdf
windows11-ltsc_2024-x64
3AbracadabrBTC.pdf
windows10-2004-x64
3AbracadabrBTC.pdf
windows11-ltsc_2024-x64
3AffiliateM...ng.pdf
windows10-2004-x64
3AffiliateM...ng.pdf
windows11-ltsc_2024-x64
8AlienwareSE.pdf
windows10-2004-x64
3AlienwareSE.pdf
windows11-ltsc_2024-x64
3Anti-Scam.pdf
windows10-2004-x64
3Anti-Scam.pdf
windows11-ltsc_2024-x64
3ApolloRevenue.pdf
windows10-2004-x64
3ApolloRevenue.pdf
windows11-ltsc_2024-x64
8AppCreation.pdf
windows10-2004-x64
3AppCreation.pdf
windows11-ltsc_2024-x64
3AydenEWhoring.pdf
windows10-2004-x64
3AydenEWhoring.pdf
windows11-ltsc_2024-x64
8BTCRevenue.pdf
windows10-2004-x64
3BTCRevenue.pdf
windows11-ltsc_2024-x64
3BlackHatBanker.pdf
windows10-2004-x64
3BlackHatBanker.pdf
windows11-ltsc_2024-x64
8CPATwister.pdf
windows10-2004-x64
3CPATwister.pdf
windows11-ltsc_2024-x64
3CardingUniversity.pdf
windows10-2004-x64
3CardingUniversity.pdf
windows11-ltsc_2024-x64
3CashExploiter.pdf
windows10-2004-x64
3CashExploiter.pdf
windows11-ltsc_2024-x64
3CashFlash.pdf
windows10-2004-x64
3CashFlash.pdf
windows11-ltsc_2024-x64
3ChistianoEWhoring.pdf
windows10-2004-x64
3ChistianoEWhoring.pdf
windows11-ltsc_2024-x64
3General
- Target Methods.zip
- Size 25.5MB
- Sample260626-phex3abs61
- SHA256 6dcbd03aa8a68b6a3411895d04f4e539812fc80f3032455254bac40916a402f0
- MD5 c1886dfa9fde43b2eed8dffcadd96976
- SHA1 5f59ef713aca10930c3fe1b4f2c98b2429731edd
- SHA512 5e91b5a9e03be77a612adf8c703c96a1d77651eab4f9084016a94e3ff6941edf2d3f680d3ce22652deff308be4c81e4ee8147b33490c2f535fb7d41f4a1c715b
- SSDEEP 393216:unB0mT8HoN+qpWnqsBBNG+XVx/QkK2bAxjbkRs8RoDiOewguam:I0BZqpnmP/fnM1BJDDam
- TLSH T1C74712079B048B85E41883F4FF273D9D1B0DB62CA5C169E7206D8E8FB750F66A84F199
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
$500DailyBTC.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
$500DailyBTC.pdf
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
100_ Anon Online.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
100_ Anon Online.pdf
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
AbracadabrBTC.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
AbracadabrBTC.pdf
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
AffiliateMarketing.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
AffiliateMarketing.pdf
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
AlienwareSE.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
AlienwareSE.pdf
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral11
Sample
Anti-Scam.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Anti-Scam.pdf
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral13
Sample
ApolloRevenue.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ApolloRevenue.pdf
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral15
Sample
AppCreation.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
AppCreation.pdf
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral17
Sample
AydenEWhoring.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
AydenEWhoring.pdf
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral19
Sample
BTCRevenue.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
BTCRevenue.pdf
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral21
Sample
BlackHatBanker.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
BlackHatBanker.pdf
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral23
Sample
CPATwister.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
CPATwister.pdf
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral25
Sample
CardingUniversity.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
CardingUniversity.pdf
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral27
Sample
CashExploiter.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
CashExploiter.pdf
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral29
Sample
CashFlash.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
CashFlash.pdf
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral31
Sample
ChistianoEWhoring.pdf
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target $500DailyBTC.pdf
- Size 102KB
- SHA256 22bcb8a2d865d03d2c2f6124c308de5b1769e13bc6c78afd6f232ecd698947bd
- MD5 2af23439f9aedbcaeefa67a353582f2d
- SHA1 4de319697227882ad7fa254c767c3c9f715d4816
- SHA512 4e6660a44082665c274b20542ef41b169260a73982af8e1a492e68c8ee5fe251e6d87efe7699311a63c51ed6e529c51f03b91d5b2be43848e4a8a6e99f2390dd
- SSDEEP 1536:Pnqpm201Y0bH6PeIzBMMtX5n0Q1EKCY/Vt3XNyXfxVqngYYYnTpWlsft5I8fs7H2:PKmGI6PPzBMMtJndyXfxsgYZTDY8N
- TLSH T165A3E01B8D48D04493675ADE7F0B3DA96109B31F2AC459FB14BE8F826950EF9EC4F242
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target 100_ Anon Online.pdf
- Size 142KB
- SHA256 9364d8dd7052f65751d6ec6ae39a328fcbc17ce1794a9829a18e22bc114c454f
- MD5 276cfead9dd9bc4cd65e61b312db5945
- SHA1 ba35624d165c9d88c30e6ee9a33837cddedf454e
- SHA512 c6f0149f002a5f291aede701bdb461df5f4b57ea534cd45bce460398b95c279980c756bf6eb7911112c07b7a2d84772b19be0318657d7f45516c30e88e69589e
- SSDEEP 3072:JqjGQBzgwzof/hH/YcaBjdXEUyRH3MaD2dByyNujQMqQ:wiQBzs7YJXby98aypujZ1
- TLSH T1A7E302F5C992DC6CFD13C9051222303C482EB6AA86FE75D29861DF0465C0E19EF62AF3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target AbracadabrBTC.pdf
- Size 388KB
- SHA256 6cb299fffa24bc67d40a5c4be229b838488c3ceebf40172e88ef79bdc1ff00b6
- MD5 1fa7f31563bafe730566c1c00291c3a9
- SHA1 a80ce5f25d872d4265dca2b6b76d04ea247b174c
- SHA512 aadd30cf62ed15549dd0b9b595ffc83e4f49e1fd219cafc3545629b7641678745a65d96182546557c689581affca2257097cbc382b5f2d30db77fb0613a13c74
- SSDEEP 6144:VnJKAYrNdTSZHKjjjjb1OYkvlMuZ53U7in5h+9Ndlx4mZ7LB/dDzbR3L:VkPUqjjjjbdo9LnaxPZ79FpL
- TLSH T1CD84D01388196ECEC27D9BE57F073C6C3B1D7614F4C566FA02258E8B75A0E3A984E11E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target AffiliateMarketing.pdf
- Size 1.6MB
- SHA256 8708b182c1bde5b33ce9b873b9ce77b01716cb2fc2f295ed10ef23a8b0d60875
- MD5 f2bf2fd29d856158e161d9ca481f384c
- SHA1 6a5c2ba100a3a5407305eb03a19f6e7dba757a7e
- SHA512 56f21f8a7dce43e23b42ef7a39a7208436e3adaa789e921af839d08bc023f8de8650bfe162655a475b36f810fe0ff30575ded9e33c5ebbc2f9a8de4fcf4e5d7b
- SSDEEP 24576:rxP69wv8cs4SeWcpGYKVIBkT5wASOe2Hz321mnnecI+bx41twVGb5tY:ERcseWcpb2T5wAS52C1EneexS64b0
- TLSH T1447501075D056E86DA6883D5BF073E9C6B1CBB08F5C172FE06668E8B7A71E714C0E129
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AlienwareSE.pdf
- Size 325KB
- SHA256 e67dc0fa0eae47344547412472399d42f0a6c30e6e3714691cd33107df4b041d
- MD5 a42dcd78b9a5baf856fdc6b3fee463be
- SHA1 8a2f7b12f96e02f4f27efef69f3d1c7862d2e94a
- SHA512 ea2a8d25dae582ead75e36d86e152b8fc8ae609153026b77ef0f4cd5b6e16cffff95f0f3eb2c29f718e8addf5d9c5b90d334554a387bec82563a9ceeeb4278dd
- SSDEEP 6144:v5VCKJxLgFv1AL774h4+1051yTYvEtUiuD/8qvET4sijjz0zcHLM0QCuWS:RVNLgFpKjDis9vJR00Hw
- TLSH T19364D063D5A73E89FA05DE1FB16B6B492F07BC6C58937DC128958368C205E704B4AF83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Anti-Scam.pdf
- Size 465KB
- SHA256 48b72b46f059e4308b383f290005360c64ae2454ae231239ed404d1a013b2e54
- MD5 c146d7a70b297d02b643295fb1a6d55c
- SHA1 6aaee34f6ed254319d14003659048159ac6ddaa2
- SHA512 2ad60ad159a4fd1cb557d4a23d2c9b7917e6e16aa5a14d856f3b6ecd971be3938597bb764088387893a822f1943fffa6101bb1547d9ce57a32e89d27049159a4
- SSDEEP 12288:3L6QozFFIQfJWp9gR6w5t82l2s4eW1flAhQFMGU8:3L6JSCWItas4e4JMB8
- TLSH T185A4011314199B8BE26483E8BF071E5C7F09BA1C64C52BFE15229F4B3968FB59D4D02E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ApolloRevenue.pdf
- Size 382KB
- SHA256 b35eb55db3975eeb02b616049cfc2245c68e32104abc9ef025b51bc6c304d00b
- MD5 d8af38cad6431223e0a1a90e8264884f
- SHA1 98c0a8d9a192c5f226db6ba3052c69c62eaeeda9
- SHA512 ddfce5b7b4d317fa68a3f870b419941d04a090fe35e41d38cbf86020a71eb8fccafc255c31de2ac03130beae53cc5d6c73c0d5ac2e5f7f7fc55964b289e5dd0e
- SSDEEP 6144:fY2O5exuYNExawHvN9yRMbD5d2VhzeaO2XKPhO6/TLVSodlILkniv9x4znOTUg:Q29gYNsa+l9Eo5dIIGXK5Om/l2Lkn5ns
- TLSH T15E84125C6A5EB06E5F79E3DE7F0AA764B62DA37620C94A0199BC2CC056C1C90F4FD702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AppCreation.pdf
- Size 702KB
- SHA256 f18249abd8254eabbaea987bc651e052fbd21ae040e094c86f2209ab95d2742d
- MD5 8a9a451a2696055c8a10222c67e45b8e
- SHA1 f8aafdefd041b8ba3cbef7cfd6089375e7a26b5a
- SHA512 83c249832cf41006b63775c8ee26c93dee69bde91430213bbf25ed07f4a6fbf8fe7bf30a25fd1c70cab09f049ead0506681b3997d1d8cfe39bdb95263b73a75c
- SSDEEP 12288:UrB/VioI5erA5mFMn82UHxRP5GqWJOuRQXeunJIm3nE49Cw2Bq:Ur9VDcecEMnC3RMtGeunJrEuCwZ
- TLSH T134E41250429E0DDEC158DEB1BE0F3D65397DF890B6D181252636CF8E82D4E6AE1234AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target AydenEWhoring.pdf
- Size 273KB
- SHA256 35e4df4712c1f5c84343e5e381e9b1544e970476f85453800b47bcb9b48c4b4d
- MD5 e4f0833a4868ea1476549c019118ae61
- SHA1 d82eae5673c9bc78bcc5beb1a8b9b869a70857b3
- SHA512 59dd7cf221931bf1e4be862b5d0e9262876762c1d8b538091012ef5465793dfcc8309c2bc3780091508dddf492f359a5e9a2c332c04f8333a7f4830258564c26
- SSDEEP 6144:q6b/TG4NrGSSl2wy3Skx74/y4cumsqYIVPfGNxOgPgULyRbNsLShI:q4rtKPoLV4YDIOgv0vI
- TLSH T17954020ECA48E9559BA64ADBFA635D58031F7308A0C56DB7201D4DCD0DA0EFDB4DA28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target BTCRevenue.pdf
- Size 366KB
- SHA256 7a54c0fbd23007ef43f27bb6ad1ca36d35caf68fea57a8c2104af912f78dad93
- MD5 9393e09f0bbc0caa8b34a84023f8208c
- SHA1 1d8c0d5d5730bd836d01cc33aadb15933d11ac73
- SHA512 2e3317517bfd2d1f75d032ad13a369742563d10ddc84231863487b3f953a9295314ed10b5a75c33befb75646efc528ba4284c07253c06bf50a80dfb6631d661e
- SSDEEP 6144:ksC+WUotKikyI/HTfGf7x+eNFK7FNHCNEGp+j/Pc+loz11HvWiZd9ASfj:g/bkjAV+GKgEp/Pc+lI11HvWwRj
- TLSH T14C84131E86CACD4CD90345F66F1F38D93E1DB30474C468E2143E1BDBB981F99E4A64A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target BlackHatBanker.pdf
- Size 222KB
- SHA256 845ab35733e917c83cd5bf906aadfb6a9571c15fd5f615f4d782f5a42cec156f
- MD5 7e8d7b212564481369544ca68a14d272
- SHA1 e40373ef25a73b36022f43826fc6fab7d304a2da
- SHA512 c9ff2b7e036395c6ccc5c33df19934fe054f9c6ad543065d64d7ddb73a919941c5d86f2cefc751f412ea2a187cde93dc1166b61ca9947359db9be26658557b03
- SSDEEP 6144:FBEbeRyt9gfT68et369skJKpgf2Zyqm+6ZhKk9jAUr:FBEbeRKcTMEqkwQsUxZhhim
- TLSH T13824131C97B3FB49E2D2F5DAFB1975A96805B386DCD80EE0B97C4D408080E57A152D4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target CPATwister.pdf
- Size 461KB
- SHA256 4759fee3f2a145ba8cda548baac43c033842d5997bec0a0fd7338404ec4b0994
- MD5 f74ea8e2d32a1b5b6e0b70f0b1d60f74
- SHA1 54f29468f32a4d1d39ef27177103874ae141bbb9
- SHA512 a08bb1ed7e9435617e7a6e14f096d4f18742752204123da6699d12d2d7e1e442f9bb2533e219e2d8302eed4361e6ee9391e0aa8a812483cb919e4a260f76f229
- SSDEEP 12288:4RKIV66d5Ezg+6MNgGP58AtT9ZW3YuaaluM:4vV6aEzg+5Nz8YT9ZIFaaluM
- TLSH T1C4A4EF78F3DBEB4C9743168CA27D3E77034EB1E222EA9503191B1E864184F3196A75BD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target CardingUniversity.pdf
- Size 1.2MB
- SHA256 a63c81ae53dafcc0fc5246c0497ac254a8c6e36343a08ff95a682b09b5096559
- MD5 25b40fcb88aa1af9e7d18410934638fe
- SHA1 aafce8aeb6ae567b8f6829d903a0ee652c1e3a62
- SHA512 aa65de8854a193f641071266b2f7df572f71c2c71ad493767e020f3e86712d68e5caf17380cf03907b538c80ee7ba26fa10a924bb8b97730cb86c3efc6b4d9ff
- SSDEEP 24576:sv8/5ufksYt1vsWc/g/e1g/eEjOj/dvg/egRg/eLg/emq:svqYkdTUD/919KC9m9L9D
- TLSH T1A2450258904E84FCE2968BCA7F7BBD5B100DB72331D965E42DE9CB13DC82FAB2559102
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target CashExploiter.pdf
- Size 368KB
- SHA256 f5a0d8160158238a2f2f1cfc31b832b025c35008bf23fda99c6192374af4c096
- MD5 dba66c555ee7c7d047787164b9857dec
- SHA1 7271dbd83193e8bebb30af423c1149dddcc8cb1f
- SHA512 1f05cb7a793c6720eb66c8638920d941308d8ff16c71408a70b22f1d6cbd956c232bf1d41d2c160bf4d3dc0aa3162b5bf75cc442034d5b73bec4efe79c8d5de8
- SSDEEP 6144:HlSALjiPH4GSL2hO9+IHIZDY0O05Nwuc/z02onmfHXZNzJ4iYbQifTsr4GCoWNeE:HlJHqH4GSL2h4+IHIZDY0N5Nwucb02o7
- TLSH T1B284CF64864848CCF0861BD03768668B85CFF197C5CBE1E52AB8C3CB4581E997056EFF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target CashFlash.pdf
- Size 392KB
- SHA256 6e032f9b3c76c30925686f535d091aa0218f6e026bcd1fabbc4759024c86c62d
- MD5 033f8278c9beaf71bec360500653a272
- SHA1 6eafeae0039e904b7559847baa9d5169ab8f8a78
- SHA512 67c79c4589b63c92702710346055ea7e207c72c21c3fb50d843aa65bbd048e4d09c43ce9e5d582abd175f814035162012c0cc40e76df8bd82abb242390ea6c47
- SSDEEP 6144:QcRTuIOaxIPtt2mwxVPfGNxOgPgULyRbjtv1ganMOrwIyibel7FBa2Ag0Hv5phA:nJuZwvIOgv03S8xBHRpq
- TLSH T1AA84E01799088686E62D83F87F172EAC0A097B0CE4C66DFB14764FC73960E275D8D16E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ChistianoEWhoring.pdf
- Size 1.4MB
- SHA256 48065c43033745dd02c88434885c428b8633a74b1ecb2eb1b5e0e75dd3283e1a
- MD5 59f9e0675dd5e0266d193440247c6fc4
- SHA1 91c9ffde1281f20e6553ebc179c7f5d2914a8b14
- SHA512 cad3f51b4322f29de6d0271390d1cd17fdc23697cb20ba0a93d6a123ad809e1d5e9ece23afb4465db0db739843369a8240822da2aa82c122bb2e7ef3fde7cb15
- SSDEEP 24576:vV9SkfPMt0oO9KJ1TjOMdawd/vhE3P4TxBGcFvT+yncaMD9BYFU:vV93PM+od/OPwa4Z+yaJmU
- TLSH T17365BF038C089B83951C97E9BF075DAD2F096B0CE9D53AEE11261ECF7FA16525C8E05E
- MD5 SHA1 SHA512 SSDEEP TLSH