Overview
overview
7Static
static
6Invoice di...1).pdf
windows10-2004-x64
3Invoice di...1).pdf
windows10-ltsc_2021-x64
3Invoice di...1).pdf
windows11-21h2-x64
3Invoice di...1).pdf
windows11-ltsc_2024-x64
3Invoice di...1).pdf
android-10-x64
Invoice di...1).pdf
android-11-x64
Invoice di...1).pdf
android-13-x64
Invoice di...1).pdf
android-14-x64
Invoice di...1).pdf
android-15-x64
Invoice di...1).pdf
android-9-x86
Invoice di...1).pdf
macos-10.15-amd64
4Invoice di...1).pdf
debian-12-armhf
Invoice di...1).pdf
debian-12-mipsel
Invoice di...1).pdf
debian-9-armhf
Invoice di...1).pdf
debian-9-mips
Invoice di...1).pdf
debian-9-mipsel
Invoice di...1).pdf
ubuntu-18.04-amd64
4Invoice di...1).pdf
ubuntu-20.04-amd64
4Invoice di...1).pdf
ubuntu-22.04-amd64
7Invoice di...1).pdf
ubuntu-24.04-amd64
7General
- Target Invoice disputed by JC (1).pdf
- Size 302KB
- Sample260810-dr2mmszfqe
- SHA256 1f941b5becb60cc53921f8e969313ee2213569b26bd1aa1182f760d4e492548b
- MD5 fd6db6fda96c23510a942166bfb71870
- SHA1 bf78121f008f1d5df384852264347f40dd76665d
- SHA512 b83afc2465cc044f42413392e1ed7e494bcc1f8eefb9b1fe980040f5d059cd9b9d331f762c835ca5bfb1dfc5873ce6351153e308bf987cdfff8a59199fa68212
- SSDEEP 6144:R+NODnGAdwJp6QqqPp3gPmV3lZOXXCALiGstLTSZLIIjOpo7FYSp:R+EDnGn3qqPlcu1ZiCfGst3SZDOCN
- TLSH T1966412F59729489200C3D73693B902DE80D7D2AD82BC6B79757D8D821B80CC31DE5AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Invoice disputed by JC (1).pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Invoice disputed by JC (1).pdf
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
Invoice disputed by JC (1).pdf
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
Invoice disputed by JC (1).pdf
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
Invoice disputed by JC (1).pdf
Resource
android-x64-20260325-en
Behavioral task
behavioral6
Sample
Invoice disputed by JC (1).pdf
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral7
Sample
Invoice disputed by JC (1).pdf
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral8
Sample
Invoice disputed by JC (1).pdf
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral9
Sample
Invoice disputed by JC (1).pdf
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral10
Sample
Invoice disputed by JC (1).pdf
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral11
Sample
Invoice disputed by JC (1).pdf
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
Invoice disputed by JC (1).pdf
Resource
debian12-armhf-20260127-en
Behavioral task
behavioral13
Sample
Invoice disputed by JC (1).pdf
Resource
debian12-mipsel-20260513-en
Behavioral task
behavioral14
Sample
Invoice disputed by JC (1).pdf
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral15
Sample
Invoice disputed by JC (1).pdf
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral16
Sample
Invoice disputed by JC (1).pdf
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral17
Sample
Invoice disputed by JC (1).pdf
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral18
Sample
Invoice disputed by JC (1).pdf
Resource
ubuntu2004-amd64-20260126-en
Behavioral task
behavioral19
Sample
Invoice disputed by JC (1).pdf
Resource
ubuntu2204-amd64-20260513-en
Behavioral task
behavioral20
Sample
Invoice disputed by JC (1).pdf
Resource
ubuntu2404-amd64-20260127-en
Malware Config
Targets
-
- Target Invoice disputed by JC (1).pdf
- Size 302KB
- SHA256 1f941b5becb60cc53921f8e969313ee2213569b26bd1aa1182f760d4e492548b
- MD5 fd6db6fda96c23510a942166bfb71870
- SHA1 bf78121f008f1d5df384852264347f40dd76665d
- SHA512 b83afc2465cc044f42413392e1ed7e494bcc1f8eefb9b1fe980040f5d059cd9b9d331f762c835ca5bfb1dfc5873ce6351153e308bf987cdfff8a59199fa68212
- SSDEEP 6144:R+NODnGAdwJp6QqqPp3gPmV3lZOXXCALiGstLTSZLIIjOpo7FYSp:R+EDnGn3qqPlcu1ZiCfGst3SZDOCN
- TLSH T1966412F59729489200C3D73693B902DE80D7D2AD82BC6B79757D8D821B80CC31DE5AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Resource Forking
1Modify Registry
1Virtualization/Sandbox Evasion
2System Checks
2