General
- Target Reassessment_Notice059079795E.pdf
- Size 80KB
- Sample260805-g2dkcabm9w
- SHA256 b745469f14e88d325e09bfb683e00e2cd335e252616258ec201fecc1dfa10ffb
- MD5 ffe8c4789013fe5a6621abcdb78e2762
- SHA1 cde96f014c49ff5bb9d3e98d00dbc3247788e256
- SHA512 a3f5b50522672b636ecd2136dcdc266a78369ed5e586accfc05ccae676d53c4b6342757356d97d836787902218fcad6f0b0f19d3d73484dc79ac50b3b37d961c
- SSDEEP 1536:9PfkYK/EC7hnZ8T2zx7e8KJ1c9cUTZdQORCcJ7ojqJ0qK8PIZxfz:58YrOhnZ8T2zx7M1c9ZTH4cJ7wv8sxfz
- TLSH T14F83D060F4898CDDF8C7C606C63A340E6F98B16730DD38E5003A1A75F5066AE6B276D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Reassessment_Notice059079795E.pdf
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target Reassessment_Notice059079795E.pdf
- Size 80KB
- SHA256 b745469f14e88d325e09bfb683e00e2cd335e252616258ec201fecc1dfa10ffb
- MD5 ffe8c4789013fe5a6621abcdb78e2762
- SHA1 cde96f014c49ff5bb9d3e98d00dbc3247788e256
- SHA512 a3f5b50522672b636ecd2136dcdc266a78369ed5e586accfc05ccae676d53c4b6342757356d97d836787902218fcad6f0b0f19d3d73484dc79ac50b3b37d961c
- SSDEEP 1536:9PfkYK/EC7hnZ8T2zx7e8KJ1c9cUTZdQORCcJ7ojqJ0qK8PIZxfz:58YrOhnZ8T2zx7M1c9ZTH4cJ7wv8sxfz
- TLSH T14F83D060F4898CDDF8C7C606C63A340E6F98B16730DD38E5003A1A75F5066AE6B276D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1