General
- Target invoice_inv_nPM0x0JXu445g2_6c9ca776e7eb4ce77dcf6f0f00178b77.pdf
- Size 103KB
- Sample260705-pe1elaf15l
- SHA256 360d939db8183016941766b66f18f6f61787b350d7517850541e06d1a8f9d83d
- MD5 8d53b9cc158304ed7c7f214ee19030f5
- SHA1 7f5a243988e07e2a0e521c112c4b8d15b5789a11
- SHA512 905ae98473d1d027a8be048e3b0c71ea9a11371e1f27ef378b2e6e7b8f91d9e05cbb03902121e4b4ef62aee480b19b8c9fb06c29885c96985747935fd2b508ea
- SSDEEP 3072:V4lm8rZlkBiyrxpNUe1BctSHRhqDnw2P8s1+jDzaif:V4lm8nYiytbf4SHRhqzWs1Y9f
- TLSH T1FBA3E0EDF63389E4C850C560B9546AD680CDD9F38C1858BB78E98B52344DD29F8361FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
invoice_inv_nPM0x0JXu445g2_6c9ca776e7eb4ce77dcf6f0f00178b77.pdf
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
invoice_inv_nPM0x0JXu445g2_6c9ca776e7eb4ce77dcf6f0f00178b77.pdf
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target invoice_inv_nPM0x0JXu445g2_6c9ca776e7eb4ce77dcf6f0f00178b77.pdf
- Size 103KB
- SHA256 360d939db8183016941766b66f18f6f61787b350d7517850541e06d1a8f9d83d
- MD5 8d53b9cc158304ed7c7f214ee19030f5
- SHA1 7f5a243988e07e2a0e521c112c4b8d15b5789a11
- SHA512 905ae98473d1d027a8be048e3b0c71ea9a11371e1f27ef378b2e6e7b8f91d9e05cbb03902121e4b4ef62aee480b19b8c9fb06c29885c96985747935fd2b508ea
- SSDEEP 3072:V4lm8rZlkBiyrxpNUe1BctSHRhqDnw2P8s1+jDzaif:V4lm8nYiytbf4SHRhqzWs1Y9f
- TLSH T1FBA3E0EDF63389E4C850C560B9546AD680CDD9F38C1858BB78E98B52344DD29F8361FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.