6effdf26b3f2042c157a0cc4add14969b7a25dad9af677fd1c66831e6feeec08

Sharing

Copy URL Twitter E-mail

General

Target
OVHcloud-2026-07-05T13:10:04.zip
Size 264KB
Sample260705-wvtejsey91
SHA256 6effdf26b3f2042c157a0cc4add14969b7a25dad9af677fd1c66831e6feeec08
MD5 341b270fb3be3f660d1c94d3145d6c69
SHA1 a9f324ac6b8f1f9f4e72724fdfa6bce23f7ae1e7
SHA512 087cee95398831e05733b3ea423e6a2ecb1e8ba1a5eac60bdb4154eab6e5a988f0046abbed66244a724407ab67fbafd889d46fb0729fe8700d68592cf927c4d7
SSDEEP 6144:ULIsdKNlofxZjowmjoSUNM4lQSZMROlbCh5h0YtU7TD:ULivqxNowuoSUC4lLZMUlb25h0YqL
TLSH
T1224423B95CA3DB6BD4206D3448EF7910897D603BCD4C815ACCDCA768EBA3C15ABD4B09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  FR76655345.pdf
- Size 38KB
- SHA256 5ef1edd75d32d96a4fe617e5a2d718673e84017cb87b673ee7c695d4e3a3e390
- MD5 be335b8004ccec0910a5aa00de5700c7
- SHA1 3384a9226b3e570391b7e8aacec773fb513620ef
- SHA512 6f3e686a6da6207929281fb317b3d99840517ccc7646b5859537e12219969d78b3f060ea1138fd406ee921b9a2a7f214deb7cc47c9c2ec74c4256f4149eabaff
- SSDEEP 768:St0wPx0pY0DavnEaLWKlSDNtEBohpzGWuqNrqxyoAgRns:s0TXaLWKl07ySzGWutxyHgZs
- TLSH
  T1A503D0A9D6D84C9CF8C3C745A3B5385E856DB217C6DC24D270384B92F91DC09EB23A97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  FR77119771.pdf
- Size 37KB
- SHA256 265f791e7bad8f28d6bffc91152b5cb1f64c0df9c36cffbcade2a62263b73e17
- MD5 e01d717ce8a8a5248acfa58e4cbd0681
- SHA1 60a322561ce241bb4be23971e1eae70d102e851d
- SHA512 c5531a3276eefd1bb3095240d2c31e7206df757f881d25751e8670685ed46aa84cda30d1288a1336219db713463243eda0cbedf529498847940430afa441d92f
- SSDEEP 768:Qt0wPx0KlspbObaDRvjWXrYfgYj22ql+6VHG4PWXSlOrdPMK6kC:i0UsprJjWsG2qJk4PWXSKPMK3C
- TLSH
  T15D03C079F98C4CCCECC38742A3787D6D547DB1279ACC71D930284D5A6C19E84E62BAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  FR77221714.pdf
- Size 39KB
- SHA256 c35661cbce0910ba57e9cd6ce9e2016f6a151767e3a2bda1ad68f097706448d2
- MD5 7035dd02d5f9f607d9fbd8a52f2465ac
- SHA1 18f0d28778b205c3036ad6e38ca8f285d86cfedb
- SHA512 9c7ca5aed16ab2318f3d1528ccc9b190c92e2eba7087ee9f44e0a472d675acf602e55d67480cd7611433970d744d5df474e3435af900c42a0e9ea7d5ec1d84db
- SSDEEP 768:Gt0wPx0mx3pg9I1M6C7rjxmYWyRaQcyf0+WEHe78QNn8J:Q0Og9IgUYWyRt0+WMeYQN8J
- TLSH
  T19303C06CA1C85CCDECC78B451079346D992E3197DAC87CD274348A07B8BD5C8F7A26A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  FR77695213.pdf
- Size 37KB
- SHA256 493825cd71957b3f7e486b82b4eff4fb5e89fcedc6126ba5361bf5445605d458
- MD5 379f7fa717847dc68d7e6b4be8091565
- SHA1 9e66c656a432d8de4e9d1f4353c2707b22780fae
- SHA512 5f4233280fc7a992d997e998a8ccb214f20176d8c8a66cfde4548de0d2b418d09ec0ed8bd99cec7037b355ff448f36305ebd4a7ac0ebd5899e6309c97c0706cd
- SSDEEP 768:xt0wPx0nrkKbBZ3xnuwd+f2W91TAQZXiFa/65lWKeu2/h21nxQMI60CK:v0zgiZhntRW918QRQJlWT3M17K
- TLSH
  T1F203AEB8D4489C8CE8C3839A733638AE957EB11313CC35C278748F46BC91895E257AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  FR77983632.pdf
- Size 39KB
- SHA256 40e3642df7a56e555297643892247ad3a1ce564a27f57bdc34fafc3dec6c1f8b
- MD5 96dd0e937c50ded29b3cc368b0b7e6b5
- SHA1 c6857667c27ccde2ece3c8a16db5077145868889
- SHA512 b7548dc4bfe970d9edcac3c87af2c5e07c2cb22a814c71e4ffbc5129c37f3786e17e7346013b4dfcb754c52b51821fe007fb1f70820d7b413adc2422f7233fa0
- SSDEEP 768:ut0wPx00a2fr8dfEqRubfWFaORVlDi+4K2QWWYecaoW5HTyIdMv:I0li+FifWFhJG5QWWTRz5+v
- TLSH
  T1E903C079A4C45C8DF8C3CB8613793CAE847D33139AD8B98374385A426C6EE84F753996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  FR78348291.pdf
- Size 37KB
- SHA256 17eed9e2484af1d084ddcc78222060da8d5c1fe48b77e7bf3b78d68050b86c9e
- MD5 620c67cece8114ee9fe584c58907209c
- SHA1 50367105e098bd4ae93b1142eda78d1f665c8007
- SHA512 0b23c820a9f6c0beb373ee8ad5a33ac6c58470d8dbe85eaca4cf55d2566bbb514813658e962d4907241df5f57ab652d9972332e6a830439d88c8fe1212bf4b50
- SSDEEP 768:kt0wPx0T3aEIuzewWXwjljQvhHVHtWn5b3m/gXlTitUAQX:G0qEVWpNVHtWnh3JXxittQX
- TLSH
  T1DA03BE7DA9884CDCFCC3C34A62767CEE903DB16A83D460923538DF059CA9985E762973
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  FR78355218.pdf
- Size 34KB
- SHA256 411f907291b3c35061a8dd62c4bd308ede1bdd26a08fb98f29fed75ff040e314
- MD5 9d6c5a1a4e03353c9e8c6578009bc896
- SHA1 382ff25ff7ec87faa4934e1ea52961050aacfba7
- SHA512 b107b428fd926beaa7eace2f81c34dfd75aa4cf0f2d712d8927e750f497e4469328bc13ae3ae9704e32db0d1374bced1604e74b6caf0d8d0cfd08a58f0938263
- SSDEEP 768:6t0wPx0P1dZ6OdwRuWcwjljQvhHV5XWDXEGGf4v6i/bSjWO/:k0XW+NV5XWj9Gf4b/QWc
- TLSH
  T136F2C069D9C88DADFCC3C35E217D3CBFC46DB20282C4759235388D026D59558AB2757B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  FR78757855.pdf
- Size 39KB
- SHA256 1e77b276e818cc6d5c7e4db18d453c0c7a0870d928dc558b4eefff7d3f6c28fb
- MD5 6d1a71cefa8f4d8d5f5e044f7cfdde5e
- SHA1 6be17d1ecd065e6530d1b12ac3a584aa19f58b26
- SHA512 2744b020eb2eac034ea80ecfea0e129f421b1df9dca90bfc924d8ad6763ece794d6f4bb492475129336f6f2b7a07259c8688261acb42417b58b0b55d2b19f09f
- SSDEEP 768:/t0wPx0p5xVnAfFy4KFpopyWZduPy/lBI5T+3foWN+LY1YW/JQ7u:10VH4wRWZdv/lBsT+3foWNQWBQ7u
- TLSH
  T11503C03895D94C8EFCC3478E11B93C6EC57EB146CACC649274384B13EDA88C9FB52956
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16