Overview
overview
7Static
static
388.lnk
windows10-2004-x64
788.lnk
windows11-ltsc_2024-x64
7CGP_Зап...26.pdf
windows10-2004-x64
3CGP_Зап...26.pdf
windows11-ltsc_2024-x64
3calibre-launcher.dll
windows10-2004-x64
3calibre-launcher.dll
windows11-ltsc_2024-x64
3calibre.exe
windows10-2004-x64
3calibre.exe
windows11-ltsc_2024-x64
3General
- Target 4fc548d4267d30ac.bin
- Size 157KB
- Sample260801-2pjaaayerc
- SHA256 4b4828dd8d2fb20fb18a072971af48abbdcd693bc8da1935739d1fbdf2c50c30
- MD5 4d8515f8d307b189577b55cd4aeb177a
- SHA1 f28dc9c4293cc34b22d868187580e96c173fcb85
- SHA512 5844cf65a590970773384e553326082f6c37a97be62291ff518f2977f881352ca0d6cd4ed70469f2ffab05e406a39ff85eb266ff6dd8a31d5adff479da03437f
- SSDEEP 3072:SCP+B8BgPbMSaN9zQkVNsx1z6w0c4eKl9XpSaCWLuujxpW/gSEKI/5OtA:f+BgkzaNtQkNsL6NcVAXpSox0EKgiA
- TLSH T1BAF312632FF02F01ACA0DEF94A5B817705386E5AD45314328B58E78CCBCB6F6E54C9A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
88.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
88.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
CGP_Заполненный_опросный_лист_по_внедрению_CommuniGate_Pro_Деловые_Линии_2026.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
CGP_Заполненный_опросный_лист_по_внедрению_CommuniGate_Pro_Деловые_Линии_2026.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
calibre-launcher.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
calibre-launcher.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
calibre.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
calibre.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 88.lnk
- Size 1005B
- SHA256 9f30f57c0fb56f08adc8fb72ceee5053becaad9d54cfdb09be08bb37b60f2a2b
- MD5 c2a6feac7dac61a2afc794d373636a04
- SHA1 7e127356c8339a439ee3e94024076db563c24008
- SHA512 a48a3189a4c821370fb519d0216dd21b9d4c9b1e8f11ae216737ae1a882d87d33314c7a2f9b480a9690d5fa0e982cc212e4895f0444803749b885f199957626a
- TLSH T1401123163FCAA638D5724A708C3267B4465BBC84DD3583CF004C589818D6B107D34F25
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
- Target CGP_Заполненный_опросный_лист_по_внедрению_CommuniGate_Pro_Деловые_Линии_2026.pdf
- Size 99KB
- SHA256 1267af291173042a790da71024c76ae917235b273598ba8716a6a2e9e371581c
- MD5 111961c168d77f5eae2de5c86d96ae04
- SHA1 da10705ab560dfec4bf1a8e3de0f5997d02b6280
- SHA512 53935888fc3cf75a0cc643fa67c6d5d3c0d0f329d0ee6318a878adab8ceffcbec48d5806a1890ae992261acaa935be369d0a9e6785884bb5312c6a32179fe289
- SSDEEP 1536:RXwC+i0v+tUteiVHfwx5oUaZXhDvtNRX+:RXwC+rvJXHIIZR5Nk
- TLSH T1F4A37670E4D85CCCF886CE8D84F934094E7CF61756CE3886711ECE16A3056D6EB9A29B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target calibre-launcher.dll
- Size 113KB
- SHA256 ac8428684424dbae254570f757ac2b79eb5bf78e6dfbb0d4247fd814bb1e95cb
- MD5 ff25b675d13f530762e15f265e846f01
- SHA1 c156faea83012ae8f2497c171d4ccc8c70207926
- SHA512 afc23e0970bc12c426af03b0f977e81d08b8a1f104eff73ff4e6a7d2e8c163d77ceefa3f4a458c1d6e9f3975e91a814ce0a87b753a4a926d8550bc49d705bd64
- SSDEEP 3072:sEz/yJii3Y4hgnbLSKUk0zK0vmlomx/WdCmNOnTskwoUpmFL:sNJX3NAbLf8KTloA8rEQ4FL
- TLSH T18AB36C11B181A0B2E4AE187904A5D7A54B3F3920CFA49DEBB7442AAD5F306E19F31F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target calibre.exe
- Size 63KB
- SHA256 64bdde10cfff243a25b021296773816057db1620df56ebd4db9178dcb88d2eaa
- MD5 853d888553d002a04484c098a3d7045f
- SHA1 d275ab06cc89db7293f9575d24dd83dcb41f56ca
- SHA512 ff3f4c48eeda7379ed6ce4a4c6456342ebcdc6751fcc15225d85066c19ee33effa52a9fa6298f8462ae5a6964e27e7d490ab31b6e3db8df3d8aa1dce967c6ddc
- SSDEEP 1536:Kp7+J62CmRRs2RGyUYoz5TjSGC1psqyl3ht0:07j2Ju2QCoz5PSd1CdJ0
- TLSH T19E53D2D372C4682EE8C186BC58EA470B58A12DCF09B8567F3B74FD66FB697403405A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1