Overview
overview
7Static
static
5__ARCHIVO-...fg.vbs
windows10-2004-x64
7__ARCHIVO-...fg.vbs
windows11-ltsc_2024-x64
7~/gdtvdd/j...v7.pdf
windows10-2004-x64
3~/gdtvdd/j...v7.pdf
windows11-ltsc_2024-x64
3~/gdtvdd/j...f6.pdf
windows10-2004-x64
3~/gdtvdd/j...f6.pdf
windows11-ltsc_2024-x64
3~/gdtvdd/j...f8.pdf
windows10-2004-x64
3~/gdtvdd/j...f8.pdf
windows11-ltsc_2024-x64
3~/gdtvdd/j...j3.pdf
windows10-2004-x64
3~/gdtvdd/j...j3.pdf
windows11-ltsc_2024-x64
3~/gdtvdd/j...10.pdf
windows10-2004-x64
3~/gdtvdd/j...10.pdf
windows11-ltsc_2024-x64
3~/gdtvdd/j...n1.pdf
windows10-2004-x64
3~/gdtvdd/j...n1.pdf
windows11-ltsc_2024-x64
3~/gdtvdd/j...v4.pdf
windows10-2004-x64
3~/gdtvdd/j...v4.pdf
windows11-ltsc_2024-x64
3~/gdtvdd/j...t9.pdf
windows10-2004-x64
3~/gdtvdd/j...t9.pdf
windows11-ltsc_2024-x64
3~/gdtvdd/j...s5.pdf
windows10-2004-x64
3~/gdtvdd/j...s5.pdf
windows11-ltsc_2024-x64
3~/gdtvdd/j...j2.pdf
windows10-2004-x64
3~/gdtvdd/j...j2.pdf
windows11-ltsc_2024-x64
3~/kaopb1.exe
windows10-2004-x64
3~/kaopb1.exe
windows11-ltsc_2024-x64
3~/zbsu2.dll
windows10-2004-x64
3~/zbsu2.dll
windows11-ltsc_2024-x64
3General
- Target 03082026_0253_31072026___ARCHIVO-nuyopfxnbnDTIU_RVSZIX-Confg.vbs.iso
- Size 5.5MB
- Sample260803-ddfg9abk8w
- SHA256 f89861065d8ca7d31c5932f7187882c7659345d3155a37919aa460c05c1dc185
- MD5 3e6a03d42ea300b481a627c7dbd98447
- SHA1 045e8546e7e266114f6d0686f4d290be66fa317a
- SHA512 524afe73231a4fafd65007fc130dfb67e475e6cf97df27a2ed08565815dff7a59e61e957efc448fb72866558326eab6d3090e3f2c061132f00973a6117cbd07b
- SSDEEP 49152:YO1CkgNrjZjvCV8tM145N2k0TeABSbxE1Ln/Q8uSUVEJJP0pgeCa0O+C/Gpgav1T:ovW
- TLSH T112462332A905DC37C5A073B4B41A6A262E6FB70740CCB2A42E5C94B72777FC5C92F45A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
__ARCHIVO-nuyopfxnbnDTIU_RVSZIX-Confg.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
__ARCHIVO-nuyopfxnbnDTIU_RVSZIX-Confg.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/aqpv7.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/aqpv7.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/gnfef6.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/gnfef6.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/igyuf8.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/igyuf8.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/npuyj3.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/npuyj3.pdf
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/nxznjf10.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/nxznjf10.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/oiezn1.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/oiezn1.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/oxlov4.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/oxlov4.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/phmut9.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/phmut9.pdf
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral19
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/qkufs5.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/qkufs5.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/zgjj2.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
~/gdtvdd/jrtzz/luxj/kcpnk/zgjj2.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
~/kaopb1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
~/kaopb1.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
~/zbsu2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
~/zbsu2.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target __ARCHIVO-nuyopfxnbnDTIU_RVSZIX-Confg.vbs
- Size 4.8MB
- SHA256 15b924cbd905173fe58183296e12da770b528cf479ef886c80149038922d8c7d
- MD5 b58105f2e6b8e10ee74beea0bf2183c8
- SHA1 3ff15ac4e4b0ecb9c1808513efd14493a411a8a0
- SHA512 162d62d70ba4eefc1da3c8757260034a88f7e87fb3139179be8cffa08b4aa05823abba0c2a1dc4ffabdeaa992913e039eec1e8442ef9bac72bbcecb2baf93acf
- SSDEEP 49152:zO1CkgNrjZjvCV8tM145N2k0TeABSbxE1Ln/Q8uSUVEJJP0pgeCa0O+C/Gpgav1+:X
- TLSH T14A363331EE596C2B09F04738F05F2B257FEDEA53808CD2948E99F0A7319EB85853B465
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/aqpv7.pdf
- Size 25KB
- SHA256 5cbd06fba0e7336c2bdb7fe27f6b4428c72d04cd55c803cf72e08973f2149179
- MD5 2ccb6c3589c3a1084052379c2f42a31d
- SHA1 b9594041c05048758c4f1fbd04bbd01e750e0dac
- SHA512 159ca1a246ff9b911aa0e48d6858b2c826c953afaa37abcca0dbcb5bd900925a56e234478449e200bf9b3daaf718e335cdf8335d28bbfbb6ed2a8df494ccc8ef
- SSDEEP 768:+efuzal74GBOSqGpPTrPUunSHKrktT3PjMrQaT3kIQiqKIA+hX1:+0Cal74+MY7rPU9HKg537MNTUe+b
- TLSH T1ECC29D46A10BC565EB1B96CABF0D6C836349B36F60D09C212F5D9E63D503EE9F60D1C2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/gnfef6.pdf
- Size 1KB
- SHA256 e1df5b5e2bfa2f0c1160ed2b1fa9110cb86e6d36e9e997cae7dd8b4958f41eb0
- MD5 a16c9e1ba83a082b34631e3e024f7aaa
- SHA1 3dea6bc373eed612fcd4ec78be1db91ebac14396
- SHA512 15d7390dc0a0b559921b9beb5cc126d6fe5c30e48b7349194e9553b13b9da818678a53f75fa3e2fd019dcbc354bcbd85c733f2e842294dd852f683cd5eacd246
- TLSH T1C841325995CC4DCCE9A68282BF1A7983B66D710305E8A4C211BDD70FC48AFC9AD62727
- MD5 SHA1 SHA512 TLSH
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/igyuf8.pdf
- Size 26KB
- SHA256 58be248df7bc4790819e8fea310abbc4cb03eb82f8bc67902529877b7ec6a608
- MD5 a43faa0483238c938c951f7981a78641
- SHA1 4b5a2cc6aaf9a4245c03711928aea3203389993a
- SHA512 0a64d4c4cacf4ab436886848b021587a3df0e268301865fe67362bde62e02981faf562c814b83c7905e11b01d904d40c771bea9da58360034d41133bce42f69f
- SSDEEP 768:oXCqzeMYefHBMp0uWdvMqKzCQ4Gmsq+Tl4qKIA4pZ:GzeMeWdvMNCymspJM4n
- TLSH T1A4C2BF6D5007D8218B0752E7FF4DBA95299AF30F21D85AA12E1C6CD25643FEAF20E0C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/npuyj3.pdf
- Size 24KB
- SHA256 50acc09a144f3858cebe79d2ec1be67c0eb50ee09408fdef69b94cf601e163f4
- MD5 45fc91f31e62900d238fb056e8082321
- SHA1 613d563d263100b2203ba250d3e8652dd2fe4c5a
- SHA512 29c5605bcc41747175e649ae531bf90af84dead26053a0ce6dbed1d6a2440d9ea8bcf05f0d15af70a79828aafde95fbd70aee2d7d49282dbd1f1323872f94a36
- SSDEEP 384:s0RqLiQDCpLjmlx8eUBgUntKKc82JFThmp9rd5XD06lgmUHKzba9xLCa:T8L5DCpPm38e6jcTJF4p946lPm
- TLSH T1E4B2BF834E464D6BE8F18740BF03FF0E6B5B7A88744B77D710A2A8C67B14AC15C1A22D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/nxznjf10.pdf
- Size 5KB
- SHA256 d0dbbd61213634c0b0a59bbb037831ecb8a2df1e002529e2b716d63bef1b416b
- MD5 bac52918529073c6fada6a210e44fc7e
- SHA1 4d33a0f3731de0e2eccb3a9b0566b640025f4bf3
- SHA512 d00789d7aea6105e28d92596e7864b743c38e84f5f23fe3c9ebbc0b6e984a0d456d2b9dad3a8a77dfa194ee7c65c3114a0e485ed0853becfbb3a8b5270fa7d69
- SSDEEP 96:ZjJXeLqNbOAS3nYsLSlXD1xpz8JQ9DlIPmXYkhiCkPbMjLt1sYsDLYVLMViS:Z5JcAO2lXh7oJgllokhidPiLfsYsDLYk
- TLSH T148B13C24827A10ADE993993979BEBE55408F74DBC7E875C36B7684E9F700C0D8011DF6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/oiezn1.pdf
- Size 25KB
- SHA256 a71b2b1a3dddbc7cac66792e66d364525410887d53a2e459d2c8548b1c4b59cf
- MD5 c02d8fe60889d077091f6088d0c42bb7
- SHA1 36934426d7799e7dd2fd821dbaf201a8cae54abd
- SHA512 e1e0f4eba4f483abf94ba55358b76b23cbf495a4c5cf8e676fca714957d715e518e89787bd8f63f6ac419e561f8501f48f14076b1fe6094bc92329548ad5b35f
- SSDEEP 768:9eQLwhBhtIurNjKSXD4EDaa2dAXiqKIA+hO:4QLyBoqNFbaa2dge+w
- TLSH T175C2AD0CA243D4249B5BB7C6BF5E16A26088B31F819C88795D3C8D974967EB0F11F5C3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/oxlov4.pdf
- Size 30KB
- SHA256 6390ac36da3dcf002e5bca4c46658752c0ddfe5ee1e53b0ca625ccd4fa9b6e3a
- MD5 73bbcb776f8bc6121e82920deb0c04cc
- SHA1 30369ae0c8912d914d046f4c57a64747b5d424ce
- SHA512 c3f7a63f729efd3bf2780ed59034f84d2158ffbf8684ac8d472046d17a8f63730351766975ca0bbd892ffe994a1ca387cbf3d077211c81367e3091a12b18d023
- SSDEEP 384:4Hko0a/gIjeYbdM1cMzc0bWtAsLfW24D8JwFLygTNNGmuGkvJ9dmUWMNv5itbFoZ:QxjeJ1cMggLFL/hNkGwJf
- TLSH T1E8E2710DF245BA90E45147D65F387639657F7318688A5B904DA3C32BEA018FB7BBCC82
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/phmut9.pdf
- Size 44KB
- SHA256 6c0fbfd95c9b63dbacf600975cb9f86b0a4ab183fb5bc6700d35454ac2ccdc80
- MD5 6870b47197786a7be8b0b708f6bc3055
- SHA1 1b6e199143d7989784d47849e66693f8b89d5355
- SHA512 f2105a6dc4e3751143c53f7c1c02f717a18a5e58bfa2d9209475499cfe18bad1d6476d5561a1a3962d97fd78b95ca07f459c7a4f7cbd40274fccffec63c27ca6
- SSDEEP 768:hZemSR3+/U+C4e0UegG0IvyBpyyLSTtuWM5p1V0MoE0QPIfgs:PSV+cfeY/y8SIWI2MoE7Ls
- TLSH T14D2318578D088E879448C3B87F172DAD2B2D670DADC57AFE00220ECB7F955651C9A12F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/qkufs5.pdf
- Size 24KB
- SHA256 cc19fcdd6504c868a83763e255f867b70f5967ca0ec8eb71c018fb3d203484f9
- MD5 d7c6195f8236d485ed76a1b274982fd6
- SHA1 aba97540c72a5eed1504c3fecfbce3531b99bedc
- SHA512 f6a563813c37208ebace5c7471fed9ef3e39dd9ad5a1384d7985b6d65c37bedb68b5ebccfc8e7657611b7412af40478fb3b1fa799164659203d0f7994eaeca96
- SSDEEP 768:oOCYtCaX7XEJ7uSe7w2irD3E6iqKIA+hq:zCYtt0J7Je7i3E6e+M
- TLSH T1F2B28D0C6907D9A09F07AAD6BF2EBDE39059A31F02D499729D2C0C065553FE6FA4E1C3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ~/gdtvdd/jrtzz/luxj/kcpnk/zgjj2.pdf
- Size 31KB
- SHA256 e1680c8496a702d81fd59733137d234cccb90582f1683ae6faec50637f905d62
- MD5 7fbb2cbef0ace6cf5b3543b59f1a0240
- SHA1 e9f851af9a15ead29ec7690e43ae7ed26600dee0
- SHA512 75bdb0e0c9d857b0a1478c64d1f032ce84682d2a9100b94b47ea5fd317a35049e010b5cc33646ad16b82047df2fd60b721abecb79f4719ee2728e70e4f9e02de
- SSDEEP 768:+C4gGOdpZa7jSfFRQZiXn8Q7OZeHHGzQqKIAqJd:+C5GKZYjKwA7OZenyUq3
- TLSH T145E2AE2E3107C8619B0753D3BB1D1AD2EA69F30F24A899B65E2C8D169947FF0F4091E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target ~/kaopb1.xml
- Size 37KB
- SHA256 e4792f1204c8c7d91988a4664fac0cb8dedbdd5f92f704dd3562c57f20c8fecc
- MD5 58b1e6b6e1ce8bdd8258ac4130f02cdf
- SHA1 da683c1693a634ff31729ed39a3789f6157db50a
- SHA512 a380d6474c20ba65a8ff45865d8ce681b8a35936f917ea2e9e49c8c58b02ef89a87ada78b467fb231d60c6471faac5dad154e1c0d1bf0a1cb5270c21648e2fcc
- SSDEEP 384:LD5yB+ftE/KWZdUt7tNmeYCMhou+2vO4T2erZIEAl9B9N/EDHZub0nuw9jas1mP/:LthNqRhpO4T2eyXED5uAnl9meNTLJM
- TLSH T1E6034A0376919036E8960B3064B4D5725E3B75816EF4808F276882BE6FB27D05FBC39B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ~/zbsu2.xml
- Size 42KB
- SHA256 529268fa450b656665e5b874f4740fe4a60df771a8d2e24c3d55b80971f9b56b
- MD5 ad2774f3583f8fad3cf576990a468f93
- SHA1 1f122ea3330a252e22de1abe9b3e91ff6f1f9a4f
- SHA512 fb7882c0c706272d3d1a641e5dbc63d545b8387750d110bf1e26d6ee4ba753f828bf85831e1d658a2fa6443cc636a4c5db4f65089053a0bfda8275282f241a42
- SSDEEP 384:vfIoo+OmAcoWu9CeeZyYG5NyEIYi2mL4/y8RLVHHfTtCLJ:3Ioo+OmAcoWACeesYXYiDLk5/bwJ
- TLSH T18C130D754464CC7CEB733A38C046D83F262361D454C2BB316ADD643D9AB13A29AAFD1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10