General

  • Target
    a8d04c3d4a97c48d33d9e14009bb3765f22242d51d9a6c9cabdaaa0bb7b22270.bin
  • Size 29KB
  • Sample260728-2plemszvav
  • SHA256 a8d04c3d4a97c48d33d9e14009bb3765f22242d51d9a6c9cabdaaa0bb7b22270
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      CGP_Заполненный_опросный_лист_по_внедрению_CommuniGate_Pro_Деловые_Линии_2026.pdf.lnk
    • Size 1KB
    • SHA256 57e37123a8c30641640bada2e0712351a457ee6c8d279926819da178d99fabaf
    • MD5 SHA1 SHA512 TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • System Binary Proxy Execution: Rundll32

      Abuse Rundll32 to proxy execution of malicious code.

    • Target
      CGP_Опросный лист_новый_2025.xlsx
    • Size 31KB
    • SHA256 2816f82c2f9ecbe8cf3a85978a88924abeadb1ab5d88c2cbb115ffcb92052ffa
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks