General
- Target 13082026_2340_29072026_Mutual_NDA_20260402_142571.pdfx.lnk.zip
- Size 58KB
- Sample260813-3n584aea66
- SHA256 37e1c14c8a2c53b6e42b88ee43950128075517182cedf3e3e6a24f8f03e27b9e
Score
8/10
Malware Config
Targets
-
- Target Fenbushi_Investor_Profile.pdf
- Size 4KB
- SHA256 9f6e85e2776dbbfda1ff111e349a53788dc6c04197ffe7b872ba398b46eeaad3
Score3/10 -
- Target Founder_Prep_Guide.pdf
- Size 5KB
- SHA256 3c22edda2ffeb944ffbddfa305303e28deab1c1cff9860061a572bf476485196
Score3/10 -
- Target Mutual_NDA_20260402_142571.pdfx.lnk
- Size 58KB
- SHA256 9ae5e70f5f348920adbded77ebb3253f99f05b64685b5b54ed6aa13b2ce8cd07
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1