General
- Target a8d04c3d4a97c48d33d9e14009bb3765f22242d51d9a6c9cabdaaa0bb7b22270.bin
- Size 29KB
- Sample260728-2plemszvav
- SHA256 a8d04c3d4a97c48d33d9e14009bb3765f22242d51d9a6c9cabdaaa0bb7b22270
- MD5 cb0c82265258d1996b059f941b9d529a
- SHA1 9cc4a2bc84540b8218167b250c2422ec07b22624
- SHA512 4320d8da129af795376ff8be089bc821394534274a272ccf9d85b7f82fb95e1608f7e87a1e55decc805c91fea3c352c5e1a50e43d8da1b09e8d11656bd4c8149
- SSDEEP 768:/CTUty+CFmYiyzFy0ZR3XQ6UyO9iqGMXHgNDWYPCHJ0jL:wUs7tiMy0LQ6U/kjMXUgJoL
- TLSH T18FD2E16D6C035C0C89517436F69C6D8694A1FCD829791358FEE8B0835EE70BDB18277E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
CGP_Заполненный_опросный_лист_по_внедрению_CommuniGate_Pro_Дел�.lnk
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
CGP_Заполненный_опросный_лист_по_внедрению_CommuniGate_Pro_Дел�.lnk
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
CGP_Опросный лист_новый_2025.xlsx
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
CGP_Опросный лист_новый_2025.xlsx
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target CGP_Заполненный_опросный_лист_по_внедрению_CommuniGate_Pro_Деловые_Линии_2026.pdf.lnk
- Size 1KB
- SHA256 57e37123a8c30641640bada2e0712351a457ee6c8d279926819da178d99fabaf
- MD5 0744512363ba3a2464b451a85e3a422c
- SHA1 364e96b8d32b8347b24cd4cc760134f4c4ef6743
- SHA512 f423e5173ec6b9a60b2ebbf6adba427b0c2b8e73be0a9c6e8aa8ed891a819ec0793e5dcb9d91ef4a977d5e07cfdfa70fa2ce8a752591de0489059dc8b06c6267
- TLSH T1BB11530036E8A768F6314B38BC36A3218F26FD86C8778B6E0584598D1865E00AD61F3E
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
System Binary Proxy Execution: Rundll32
Abuse Rundll32 to proxy execution of malicious code.
-
- Target CGP_Опросный лист_новый_2025.xlsx
- Size 31KB
- SHA256 2816f82c2f9ecbe8cf3a85978a88924abeadb1ab5d88c2cbb115ffcb92052ffa
- MD5 d1e00cb32c11ef53a563d861487b28bd
- SHA1 25771f9e8cfba1cf012bd395eb5c35d7016713da
- SHA512 9121c90e4c5662a2d18f4f616d8850a4ca42886f6d0e45257475a276f0fdc4e6005baf81aa71401c7e02345feff34d514364621c1e6fd2adf3321138a89eec0b
- SSDEEP 768:H1YF2BYe/GG+P3qTooeBZFO13gVYWtY/2cIt0:KcB3/d48UOt
- TLSH T17AE2D11CE12278EEE4BA453F905415B7E08C3A958801CD3D98A0BB6DD454FE3578DBEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10