General
- Target ព្រឹត្តិការណ៍ភ្ញាក់ផ្អើលរដូវក្តៅ.pdf.exe
- Size 18.8MB
- Sample260718-mc88lsf18k
- SHA256 4064751d6ed35f47bb7ec33fe06c6403627a42d1dfd357677272aff4ee068617
- MD5 1dc31890ca3f2bebd71342417ae3b663
- SHA1 a6703b8e7816658dde987ec025fd78ca7f17fdb0
- SHA512 82f5a46940651b1c994468af2745346413d2bd44ff9fc09c69a448891bc49e9349d5b081f4779930adf9ff8a0f75b0604e4db0ad8565ee30209a497489523231
- SSDEEP 393216:McWvEBcJ4an1i8oU1axaYpFAokO0kckh9qpXi1pTIQ9a2NmVx3Vwy7Ip:Mvl1iM/AFApiDq5i1pTg2Nmjlz7Ip
- TLSH T12B17333FF2ACA53EC46B0A324573862059B7B751B62B8C1E03F0454DDF6A4B02E3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target ព្រឹត្តិការណ៍ភ្ញាក់ផ្អើលរដូវក្តៅ.pdf.exe
- Size 18.8MB
- SHA256 4064751d6ed35f47bb7ec33fe06c6403627a42d1dfd357677272aff4ee068617
- MD5 1dc31890ca3f2bebd71342417ae3b663
- SHA1 a6703b8e7816658dde987ec025fd78ca7f17fdb0
- SHA512 82f5a46940651b1c994468af2745346413d2bd44ff9fc09c69a448891bc49e9349d5b081f4779930adf9ff8a0f75b0604e4db0ad8565ee30209a497489523231
- SSDEEP 393216:McWvEBcJ4an1i8oU1axaYpFAokO0kckh9qpXi1pTIQ9a2NmVx3Vwy7Ip:Mvl1iM/AFApiDq5i1pTg2Nmjlz7Ip
- TLSH T12B17333FF2ACA53EC46B0A324573862059B7B751B62B8C1E03F0454DDF6A4B02E3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.