General
- Target Quotation Request from Fresno.pdf.pdf
- Size 22KB
- Sample260701-tahffabv3t
- SHA256 ec8836c62fc29a01fe41e311126a6d7a5fd37519f18b04c4d53d415dd39edc2b
- MD5 49e83163902f79a75c0f18c6e977a9e0
- SHA1 ebdfffe0b8292ade80941c61dff9320efff7846b
- SHA512 c366ca412a0cdc67b240815216a459dd82d65c0fe654557e704b359662d6d84a07ee2e9339f2d03f0e850ca7fb73c2e20ad852dcea7cf63d67807ee24f1fbe40
- SSDEEP 384:cNnPE/mHCEP5dDJwYoMehOCUSsNWg5HiArDkefdh0idCUSKrqJDex:IPwmHCIrq5MeMHNWsceHLZyY
- TLSH T146A28C74ACF56CDDF8C2C3F66630B95E483CB0034FD4A1D0BA5A8F09A844EE4AE55953
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Quotation Request from Fresno.pdf
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quotation Request from Fresno.pdf
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Quotation Request from Fresno.pdf.pdf
- Size 22KB
- SHA256 ec8836c62fc29a01fe41e311126a6d7a5fd37519f18b04c4d53d415dd39edc2b
- MD5 49e83163902f79a75c0f18c6e977a9e0
- SHA1 ebdfffe0b8292ade80941c61dff9320efff7846b
- SHA512 c366ca412a0cdc67b240815216a459dd82d65c0fe654557e704b359662d6d84a07ee2e9339f2d03f0e850ca7fb73c2e20ad852dcea7cf63d67807ee24f1fbe40
- SSDEEP 384:cNnPE/mHCEP5dDJwYoMehOCUSsNWg5HiArDkefdh0idCUSKrqJDex:IPwmHCIrq5MeMHNWsceHLZyY
- TLSH T146A28C74ACF56CDDF8C2C3F66630B95E483CB0034FD4A1D0BA5A8F09A844EE4AE55953
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.