General

  • Target
    ADOBE SIMPLE (1).zip
  • Size 7KB
  • Sample260727-plsckaswct
  • SHA256 6ba0337e3025bab98591affbcc74b0c46d25588107b8f67d68378ff0915cb8d0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      Documents/Q12 2026 SETTLEMENT.bat
    • Size 1KB
    • SHA256 415da0881ae2019a096bba596c1643fee0ec44d08682f748f88a39665d99a375
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      invite/index.html
    • Size 3KB
    • SHA256 8805ca6cefe36fd1a55cf9dd90fc4450a21f7aebb84501b7e65fe1250655221f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks