General

  • Target
    03082026_0253_31072026___ARCHIVO-nuyopfxnbnDTIU_RVSZIX-Confg.vbs.iso
  • Size 5.5MB
  • Sample260803-ddfg9abk8w
  • SHA256 f89861065d8ca7d31c5932f7187882c7659345d3155a37919aa460c05c1dc185
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      __ARCHIVO-nuyopfxnbnDTIU_RVSZIX-Confg.vbs
    • Size 4.8MB
    • SHA256 15b924cbd905173fe58183296e12da770b528cf479ef886c80149038922d8c7d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Executes a VBScript file via the Windows Script Host.

    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/aqpv7.pdf
    • Size 25KB
    • SHA256 5cbd06fba0e7336c2bdb7fe27f6b4428c72d04cd55c803cf72e08973f2149179
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/gnfef6.pdf
    • Size 1KB
    • SHA256 e1df5b5e2bfa2f0c1160ed2b1fa9110cb86e6d36e9e997cae7dd8b4958f41eb0
    • MD5 SHA1 SHA512 TLSH
    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/igyuf8.pdf
    • Size 26KB
    • SHA256 58be248df7bc4790819e8fea310abbc4cb03eb82f8bc67902529877b7ec6a608
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/npuyj3.pdf
    • Size 24KB
    • SHA256 50acc09a144f3858cebe79d2ec1be67c0eb50ee09408fdef69b94cf601e163f4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/nxznjf10.pdf
    • Size 5KB
    • SHA256 d0dbbd61213634c0b0a59bbb037831ecb8a2df1e002529e2b716d63bef1b416b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/oiezn1.pdf
    • Size 25KB
    • SHA256 a71b2b1a3dddbc7cac66792e66d364525410887d53a2e459d2c8548b1c4b59cf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/oxlov4.pdf
    • Size 30KB
    • SHA256 6390ac36da3dcf002e5bca4c46658752c0ddfe5ee1e53b0ca625ccd4fa9b6e3a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/phmut9.pdf
    • Size 44KB
    • SHA256 6c0fbfd95c9b63dbacf600975cb9f86b0a4ab183fb5bc6700d35454ac2ccdc80
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/qkufs5.pdf
    • Size 24KB
    • SHA256 cc19fcdd6504c868a83763e255f867b70f5967ca0ec8eb71c018fb3d203484f9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ~/gdtvdd/jrtzz/luxj/kcpnk/zgjj2.pdf
    • Size 31KB
    • SHA256 e1680c8496a702d81fd59733137d234cccb90582f1683ae6faec50637f905d62
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      ~/kaopb1.xml
    • Size 37KB
    • SHA256 e4792f1204c8c7d91988a4664fac0cb8dedbdd5f92f704dd3562c57f20c8fecc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      ~/zbsu2.xml
    • Size 42KB
    • SHA256 529268fa450b656665e5b874f4740fe4a60df771a8d2e24c3d55b80971f9b56b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pdflinkqr
Score
5/10

behavioral1

discoveryexecution
Score
7/10

behavioral2

discoveryexecutionpersistenceransomware
Score
7/10

behavioral3

adwarediscoveryspyware
Score
3/10

behavioral4

adwarediscoveryspyware
Score
3/10

behavioral5

adwarediscoveryspyware
Score
3/10

behavioral6

adwarediscoveryspyware
Score
3/10

behavioral7

adwarediscoveryspyware
Score
3/10

behavioral8

adwarediscoveryspyware
Score
3/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

adwarediscoveryspyware
Score
3/10

behavioral11

adwarediscoveryspyware
Score
3/10

behavioral12

adwarediscoveryspyware
Score
3/10

behavioral13

adwarediscoveryspyware
Score
3/10

behavioral14

adwarediscoveryspyware
Score
3/10

behavioral15

adwarediscoveryspyware
Score
3/10

behavioral16

adwarediscoveryspyware
Score
3/10

behavioral17

adwarediscoveryspyware
Score
3/10

behavioral18

adwarediscoveryspyware
Score
3/10

behavioral19

adwarediscoveryspyware
Score
3/10

behavioral20

adwarediscoveryspyware
Score
3/10

behavioral21

adwarediscoveryspyware
Score
3/10

behavioral22

adwarediscoveryspyware
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10