General
- Target Orden de compra_pdf.001
- Size 20KB
- Sample260808-q8e67adg55
- SHA256 50dadb0931d454396a8847dc9680e6acc96fda57c3f82784e3c7dd4c677803b3
- MD5 85803ce960b75cf87b84db80aba841bd
- SHA1 f48ec9076eb386a7be1dcf7738dae5271df58dda
- SHA512 623f3d6f1929d1f62d22c93f3634729410d3237a10e32f8a6a1cee2a2d6ff4b40e29ffa72792eda604b0b117741a696665df7e9a5df3faa3a55e8e0e407958b9
- SSDEEP 384:mf3QywvxnhgZZeL8haJ6LBPwRhNS7RGf7G/TaWlGmUYG2RwNZnz4vj:mf3QjYZhhTPwRekqLTltG9pz4r
- TLSH T1E592D0A3141CEBC79DDFF4215E2A5C0C868F173482673AB59829D050C5B46FDF52AE25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Orden de compra_pdf.rar
Resource
win10ltsc2021-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Orden de compra_pdf.js
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Orden de compra_pdf.001
- Size 20KB
- SHA256 50dadb0931d454396a8847dc9680e6acc96fda57c3f82784e3c7dd4c677803b3
- MD5 85803ce960b75cf87b84db80aba841bd
- SHA1 f48ec9076eb386a7be1dcf7738dae5271df58dda
- SHA512 623f3d6f1929d1f62d22c93f3634729410d3237a10e32f8a6a1cee2a2d6ff4b40e29ffa72792eda604b0b117741a696665df7e9a5df3faa3a55e8e0e407958b9
- SSDEEP 384:mf3QywvxnhgZZeL8haJ6LBPwRhNS7RGf7G/TaWlGmUYG2RwNZnz4vj:mf3QjYZhhTPwRekqLTltG9pz4r
- TLSH T1E592D0A3141CEBC79DDFF4215E2A5C0C868F173482673AB59829D050C5B46FDF52AE25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
- Target Orden de compra_pdf.js
- Size 81KB
- SHA256 848587e551798634e8293139fa19c0458257651a4077ae68f783d8e2f7933ef3
- MD5 d0014caee02414985c8c95123866bbff
- SHA1 036dfef7c6194ce63a505a98a60f86ea7430e7c4
- SHA512 ae8e75867d08d1774ce17b7d0ea84e836adf823696ca71fd2c9cf478d8555315893f2b19f4b24054507183aa9f8d41529a0f087a2cf3753944296222ebd63d08
- SSDEEP 768:mRgHE0IszEKYrFOvAow99ZREQ3kaZLjBlKRgKN+dmb2aPRXAElTrFbNjOBK+xm+W:m+zONJLXjdTNZl0wjskURVxAe
- TLSH T1A2830C155AC6748053366BBFA22B9CD5F376072B02901817B87C6450EFF2D0AEED9CB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.