General
- Target Audit_Package.zip
- Size 7.2MB
- Sample260731-jsqvesfb97
- SHA256 3bd4538a7de2383a6e4b6f8372418570e4a92a3af26c445746d5dd45f91c0983
- MD5 bff575ba83ce9d9af4d4a8dd31a84409
- SHA1 4eeb5043dd5f68730f05ddeda800678c2fbdfab0
- SHA512 5ec786353248c3ca06c4a619438b5210022b4cfeac2b5a26fa3433c0a2ee024c14555ae2e5999bfa96854170f3b6c54ab13da2d4948aef18d1e683b4e9b023b6
- SSDEEP 196608:ANRsHKttB/UmwnGXDsA1UKy1wLGciNvdG3PWZXVD6:J2/+GzRGzb98fWVVD6
- TLSH T1E17633D02FA210DD5381C31B246D93DFC05D1BB91EEF647EA986A844E59B0FA29FD813
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Internal_Audit_Update_Q3.pdf.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
logger.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Internal_Audit_Update_Q3.pdf.exe
- Size 7B
- SHA256 ced1af6d51438341a0335cc00e1c2867fb718a537c1173cf210070a6b1cdf40a
- MD5 c73626d23469519894d58bc98bee9655
- SHA1 b6e1f73240b847eb79237b4424f7edc8dec98414
- SHA512 790d1e0fd74d384d0657a1966a2de05d05e0dad6d2e3f76c245399aa24f6b4014eeb89784424b10f8b6e8b633b706acc8dc92e33ab3deffc72fb9013eb965ca7
- MD5 SHA1 SHA512
Score1/10 -
- Target logger.exe
- Size 7.4MB
- SHA256 49939d0e9e7cbca33eac15750c1f45ee96fe09ad91c44c790fad0a9133736d95
- MD5 23909eaac39a861c26c44f83e881bc1a
- SHA1 92477e7c94df6e6c3179a0ab1a49cb7630d69a3a
- SHA512 97e913bd8b9f5e8132e764ecb285e0e61ecfca52a2e27955da7c74d7dea641027d33fd5fe3e2721556b79a40fdddab9e566278b346454e48d612a4eec56dc56d
- SSDEEP 196608:2aNTwhLb88gL2Vmd6+DXLZy7YM30LzajTk0ax8wpbteo:2nLbdgL2Vmd6m70GzajZaxbao
- TLSH T1E5763388926005BAE9278139CA77942AC637796E1B61D2C707F4C3950F077F0AE79FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.