General
- Target 01082026_0221_31072026_MPE-D-26-10135-A1_QUOTATION_FORMpdf.rar
- Size 1.2MB
- Sample260801-ctbcsscq2s
- SHA256 1d687a11e0fd0c3d3e42b3c7707ddc8aa2d121fbb2c39380df8683759ce39fee
- MD5 f83930cf46baf26b517cdd100231a3a9
- SHA1 59fc98fcea6e21babea72a97a090dd1238c64a8f
- SHA512 5a75f4df718a01acdf1c9ec9eb88ee0d767c07496d8af8de83229b89893386eb7eb8410b05e394e39e9339186f630c99733cee7b5e4942dc674f707aaaa2e4a4
- SSDEEP 24576:HudKUMaI+hLn+2+5dEVOC+XP14mKDUfQJ9WoCwPqCQx/:Od3zI+hi2+52P+XN4mKDgc9WnwPjQ/
- TLSH T12B5533801BB12DC3AEAB7493802E654C7CE0EE456AF507B014CE57D36E577DEDA224E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
MPE-D-26-10135-A1_QUOTATION_FORMpdf.js
Resource
win10v2004-20260513-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target MPE-D-26-10135-A1_QUOTATION_FORMpdf.JS
- Size 3.9MB
- SHA256 a2da5567a45a50560adb90e9d5795fa01208d3d06bc12d5f7aa3cca87dedd5a7
- MD5 11ffec074fba8e17ea946d85312defbf
- SHA1 7eb72beec67ea8b956783e0b6fb8836e031a5a9d
- SHA512 83f33c337f94b6875db4ee9616ee59ccb32c20009d6df32a525ecc512200bee3933d1129c3265bc48c84e2914d0f2ec48ccd8e9cc729acaec54c31d8fa27aabe
- SSDEEP 98304:ou/TZTsj7BnPZHrx7iffsL1gH8t7FcJktXGFNHS1evhXIGHboH6QQk:ou7ZU7BPZLx7iffsLGq7FcoXGbSy4G7C
- TLSH T14116F891ABA4487763A0D70C6E76FA229339116300E5DFC6323D8994762FD0F5329EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger