General
- Target 03082026_0912_02082026_CTBC_Bank_Estatement_11507pdf.zip
- Size 2KB
- Sample260803-k58rfasgqf
- SHA256 bdaec2cd89b7731c90c2203c97a990d5769d46867e2c052bb39ed5ec46e5b23d
Score
8/10
Malware Config
Targets
-
- Target CTBC_Bank_Estatement_11507·pdf.bat
- Size 4KB
- SHA256 4c7e0f0970462c5e9c652e9c4318c558250d8b6cb34543130a4229b4dab63fac
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger