General
- Target ADOBE SIMPLE (1).zip
- Size 7KB
- Sample260727-plsckaswct
- SHA256 6ba0337e3025bab98591affbcc74b0c46d25588107b8f67d68378ff0915cb8d0
- MD5 f42fad8973acafd359bede0df662e0f2
- SHA1 f1f48da54a5d39f5e4b0b76b93f7a4fc6626b3de
- SHA512 2c9baa355ff0919efbd411b043763cf770a28148ce328683db84da5c6ee7545d2e1df6ca8a2853025922be085311b437cc53f768e9e4af93ec820ea5ce33ecad
- SSDEEP 192:XsHzj4Sxm3Nw1x3HXN1IjMlABHrpu2FNwmLv5JKpcmi:XEQ3S1B91IjMlYrfNTLhmi
- TLSH T19DE19E2867EF5058C42D1C72E741296138EF7FC998037AEEAFB5CD286E5A0581A32905
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Documents/Q12 2026 SETTLEMENT.bat
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Documents/Q12 2026 SETTLEMENT.bat
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
invite/index.html
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral4
Sample
invite/index.html
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Documents/Q12 2026 SETTLEMENT.bat
- Size 1KB
- SHA256 415da0881ae2019a096bba596c1643fee0ec44d08682f748f88a39665d99a375
- MD5 39f4e4bc7c393ccdc480a047e0351dc0
- SHA1 a3ced797cfffaf2179a36d4256ab3b4887f350e6
- SHA512 6befcade528027a4f1c9819b0a8a68c0c638b6bf04c8ffbde7aa61c9d0a9aab25928837c8a663f91d8918d3fb73118530f559fabd7779b910aff489583132cac
- TLSH T11821748336A017ED47E78874D871A39CA66BA9C51B0D77F223B490A23C25FF48859C88
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target invite/index.html
- Size 3KB
- SHA256 8805ca6cefe36fd1a55cf9dd90fc4450a21f7aebb84501b7e65fe1250655221f
- MD5 5e1e0921b3350d5179bca4ce0cda2504
- SHA1 fdf0fd388ad63897da48f5b25105a352a94a8287
- SHA512 e5a15ec30410c0b354472f01655842b723c1a8b499fe52cf5dd18d7d40bb22e5d9232a67a8f137d752709943209e468da70cfa2cbc5caf360e42e2b19f87f805
- TLSH T1C081E8B760924116353390E17293734538538113BE52DB91B7EEA2E1EFCBA8786772CC
- MD5 SHA1 SHA512 TLSH
Score3/10