General
- Target PLIK UMOWY-pdf.js
- Size 39KB
- Sample260804-p998aaxvbw
- SHA256 0046ec45bc6c207c5cfb99bcf5d52c34b6a6e577e0dc621da8ab9da71228b517
- MD5 d114874d48b9b4069d8c8da0d4ca6a88
- SHA1 5cc8f49ece05472c4edf0a1a6d4c4e87a33193af
- SHA512 669eea2d57b0aa299952a857d52b1ad800808b6dd2fa80955a2be3b4faf9b9596070ec99339964890eac969ebabfcd6b8dc8ecd26e931bea4bbf40e654ae94f6
- SSDEEP 768:gvcDsClM/1HFUWubmf9VomoNnN/1BYj4fkirprnlYFClss4h8:Rs6M/5FLwmf4pYj4fZrtlYSz
- TLSH T1F703F664B71D153B0A45A6CCBB6EC74188F643980969F171B2AFCB49B704E8CC2F8D5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
PLIK UMOWY-pdf.js
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
PLIK UMOWY-pdf.js
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target PLIK UMOWY-pdf.js
- Size 39KB
- SHA256 0046ec45bc6c207c5cfb99bcf5d52c34b6a6e577e0dc621da8ab9da71228b517
- MD5 d114874d48b9b4069d8c8da0d4ca6a88
- SHA1 5cc8f49ece05472c4edf0a1a6d4c4e87a33193af
- SHA512 669eea2d57b0aa299952a857d52b1ad800808b6dd2fa80955a2be3b4faf9b9596070ec99339964890eac969ebabfcd6b8dc8ecd26e931bea4bbf40e654ae94f6
- SSDEEP 768:gvcDsClM/1HFUWubmf9VomoNnN/1BYj4fkirprnlYFClss4h8:Rs6M/5FLwmf4pYj4fZrtlYSz
- TLSH T1F703F664B71D153B0A45A6CCBB6EC74188F643980969F171B2AFCB49B704E8CC2F8D5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory