General
- Target ffs.zip
- Size 10.1MB
- Sample260715-xwferacy4n
- SHA256 96e2101353fa6dc25ed96468cc344663b35136426b4485c0b7d2240698cfe999
- MD5 3f4caf7817eed51bcad6dd6944b71419
- SHA1 810c9cbe2777a8e8f22ac4e0904c47b4b5f3bdaa
- SHA512 c5fe914e65c62aed1211e106b8b3b0a715d92bb678aaba5c96fbd4035a96b519883e1e8fa692d4f911d211c3daac332ddea47f5d8e1ad3ba99627156e08d5b59
- SSDEEP 196608:dc54v4Yoopaq0EOsPe2Brds4m2ZvU75T+LvaKuSxo3ZdQL6VDuLhOeKzRD8XvLz2:dVvyopismurxmYU75avUSxcZdS6wLAr7
- TLSH T130B63376ED077814DDEB39F297858210E8D990260AA34AF77CD1A3C65817AF49063F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Invoice.pdf.exe
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
Invoice.pdf.exe
Resource
win11ltsc2024-20260709-en
6 signatures
300 seconds
Behavioral task
behavioral3
Sample
[SYSTEM]/$UpCase.ps1
Resource
win10v2004-20260513-en
3 signatures
300 seconds
Behavioral task
behavioral4
Sample
[SYSTEM]/$UpCase.ps1
Resource
win11ltsc2024-20260709-en
3 signatures
300 seconds
Behavioral task
behavioral5
Sample
uxtheme.dll
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral6
Sample
uxtheme.dll
Resource
win11ltsc2024-20260709-en
0 signatures
300 seconds
Malware Config
Targets
-
- Target Invoice.pdf.exe
- Size 19.4MB
- SHA256 719f689b34f47be8ca105ce8484948474dafde0e106bab599e4a89326070c3d0
- MD5 79435213ab241b13a9d8da354c088868
- SHA1 6232326f3da33c340c57e7370e038085d5f86d88
- SHA512 1fe4766426e145aad9215830cab225cdf9151de23fe56877654aa5b84bb8af65486a8a0d8466b3f8cbeaea32baa6c5ffe04347893e945085a73a3a85e5f969c1
- SSDEEP 393216:rcwPySz6s9X5xZ08RBCxXJq3o4I5y/+uuPZ:L6s9X5xZ08RBCxXJxd5yGuuPZ
- TLSH T1FC17BE96B2949AB8D542FA3CC911827EF229FC2C5B61834741D97D747E733680C29FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory
-
- Target [SYSTEM]/$UpCase
- Size 128KB
- SHA256 41c26bc7a12bdaeb26025c93118697c7e3ef81ee048b00fe5cce2a472e0e0742
- MD5 7ff498a44e45e77374cc7c962b1b92f2
- SHA1 5161a18e27b9ca9f5d04f2154576bf1ffb1121e8
- SHA512 d76745c51900495acc56fead915650d32f940e8258ab672e369e92cc54e9d76a30611470e208e561ba80a920082d1d4dc28787a29d32521e65cf0dee8bd9bcb6
- SSDEEP 3072:e/pcGnh3vs/InbrTIHvPnHmC5irCuMo/+ncoZZihnhE:mrZn7y/EGuH/cpis
- TLSH T163D34CA1E161971137FBC439E6B53F26999A241AA613842FFF6787C2C4CAFF024C9417
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target uxtheme.dll
- Size 8KB
- SHA256 6c16ab86cea1429192f4dbef8f50a818c86bf4ef6de4197077094a8fe16215cc
- MD5 22166a9e6fc4f96fb9fc30581235cd02
- SHA1 ea6d1e199a4313d7f3a83d23f1d6b6d51dfbdbbf
- SHA512 0c6e58d4b3f60cc82c99a433c60e9e825b7cab9b69209c4e256ad3ab704452b313a11f999275ea92ec5335f5bbae7fb19334e9ddf8731bb02b253d57891382eb
- SSDEEP 192:lDRCCCCCCCD1bCCCCCHKG/6TnuyH3W32LK/y:R+1xGev3se7
- TLSH T16802B69F50955C35F42E4B380BDB7634B6F37872071D04AEA9F4C32328E57A81629613
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory