General
- Target Cty TNHH Truong Minh.zip
- Size 2KB
- Sample260710-phgfwsbv4k
- SHA256 c14b1373052bbc14adf5e2ac8f24b5cd97bc4794a18128a33e344db0b4e825f8
- MD5 be1bc331e3173151e72c095a018b4262
- SHA1 729c82af1d958b58659f226882ef58583b5dd1e0
- SHA512 34e91431c4dc53fd191f34d972316077faf988f5281c9c3e6f39247efdda490f0c4ae9a68157aab4c7682d856dc88bc977dc0efd30bcb34a1d3c5379b475610f
- TLSH T1A04131171BE14CC1C1B173B7B8FD81C3D84A91AE23E5201BA8CFC7A2C94AB635352AC4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Cty TNHH Truong Minh/Document Cty TNHH Truong Minh023992494350.pdf.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Cty TNHH Truong Minh/Document Cty TNHH Truong Minh023992494350.pdf.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Cty TNHH Truong Minh/Du lieu mau 2388349595492342.pdf.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Cty TNHH Truong Minh/Du lieu mau 2388349595492342.pdf.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Cty TNHH Truong Minh/So do luong du lieu 023492992543959.pdf.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Cty TNHH Truong Minh/So do luong du lieu 023492992543959.pdf.lnk
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Cty TNHH Truong Minh/Document Cty TNHH Truong Minh023992494350.pdf.lnk
- Size 857B
- SHA256 b10768d33d0e90c87a659decb86bffd5a3a64d089e05ce089d48aa4194bafb30
- MD5 a75c8c78712257593a6ca9693691fcd7
- SHA1 8d5ee6a871fc4fd18a02a3eea825e2911296ca5c
- SHA512 cebb215ae42ac9e218ba05028f242ff7e1875b11b646abc0fcf2450cafa2ba2b74c311dddd1848af14846d65f1b4acb9f23d98e3697bbb8745ba9cecff6d72f1
- TLSH T1DE11682036FC6364F2372E39ACB153419E3DB91A8C30D60C8461D50D3C25B61EC25F27
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
System Binary Proxy Execution: Rundll32
Abuse Rundll32 to proxy execution of malicious code.
-
- Target Cty TNHH Truong Minh/Du lieu mau 2388349595492342.pdf.lnk
- Size 857B
- SHA256 b10768d33d0e90c87a659decb86bffd5a3a64d089e05ce089d48aa4194bafb30
- MD5 a75c8c78712257593a6ca9693691fcd7
- SHA1 8d5ee6a871fc4fd18a02a3eea825e2911296ca5c
- SHA512 cebb215ae42ac9e218ba05028f242ff7e1875b11b646abc0fcf2450cafa2ba2b74c311dddd1848af14846d65f1b4acb9f23d98e3697bbb8745ba9cecff6d72f1
- TLSH T1DE11682036FC6364F2372E39ACB153419E3DB91A8C30D60C8461D50D3C25B61EC25F27
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
System Binary Proxy Execution: Rundll32
Abuse Rundll32 to proxy execution of malicious code.
-
- Target Cty TNHH Truong Minh/So do luong du lieu 023492992543959.pdf.lnk
- Size 857B
- SHA256 b10768d33d0e90c87a659decb86bffd5a3a64d089e05ce089d48aa4194bafb30
- MD5 a75c8c78712257593a6ca9693691fcd7
- SHA1 8d5ee6a871fc4fd18a02a3eea825e2911296ca5c
- SHA512 cebb215ae42ac9e218ba05028f242ff7e1875b11b646abc0fcf2450cafa2ba2b74c311dddd1848af14846d65f1b4acb9f23d98e3697bbb8745ba9cecff6d72f1
- TLSH T1DE11682036FC6364F2372E39ACB153419E3DB91A8C30D60C8461D50D3C25B61EC25F27
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
System Binary Proxy Execution: Rundll32
Abuse Rundll32 to proxy execution of malicious code.