f531bec8ad2d6fddef89e652818908509b7075834a083729cc84eef16c6957d2

General

Target
14082026_0319_25062026_Signed-KGM_Dragonfly_MNDA.doc.lnk.zip
Size 926KB
Sample260814-dvcspatvby
SHA256 f531bec8ad2d6fddef89e652818908509b7075834a083729cc84eef16c6957d2
MD5 077dfb2b5d9c7d2f79b362932263e6ba
SHA1 6c84324616578da50ce1cba825d5c046f9f31618
SHA512 5f1276f605f04b14848bae64d78d02614dcce4147c176de310257b570eec3b2f2b1f0d485b4737bccc7ae513da09964ca27f7d4e18578393ff63998c0ffc49e6
SSDEEP 24576:om99BqZEmWI2AMErJmVm/MqybN0IjVddlVjqR7sDBt:F9BqemhRDeAMqybDhZVK+t
TLSH
T1581523EB6BC520DA17E5A183DBBAEF8A557981D1779E04B2CEFD1FC4C68D814346060C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  KGM_Strategy_Redefining_Supply.pdf
- Size 877KB
- SHA256 eb632b97e1fe3adba9a1287b2095310d4a97942295950cc0b0be120f7dc99628
- MD5 004ee977f92d6187056530e69d73427d
- SHA1 2a241cbe40749489b88c10a421107cfa1617c987
- SHA512 240b6779fc8998806c462bccc85c8a9c3f113a3666dca643c9b98b4278a7642f111ca25a005f8bff551b4087785bb5d300c8e911e2bd3a3e3a74621d5036bb8d
- SSDEEP 24576:RpAzrtdIgnYy5rJ2aK9UR7WJ+Yjtlv+mL:RWzrtRYS2UC82v+mL
- TLSH
  T1771502BBEBECA49DD489C7C1722835C9045CF277A6C8248214784BC761CCE89BB7B795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  Signed-KGM_Dragonfly_MNDA.doc.lnk
- Size 3KB
- SHA256 2c7bc0ebbbfa282fc3ed3598348d361914fecfea027712f47c4f6cfcc705690f
- MD5 7cae7a3a7123f19c31dadbfd332efec8
- SHA1 cb12ec446d338df96f1020e3547c822c42075f96
- SHA512 1be611695e17ccc415bd87106bd11e5feef7d8bfb219b9ca08ac170b4cdd68acf28e1a3dc794d6e9e567bbfa23de6ee00c1f2e1da3852c06df162f7bcf919424
- TLSH
  T14451454427E90214F2B72A35B93F1190583E7D5E9B27CA8D1228E08E0AF1A14D97BF37
- MD5 SHA1 SHA512 TLSH
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Command and Scripting Interpreter: PowerShell
  Start PowerShell.
  execution
behavioral3 behavioral4
- Target
  Template_KGM_Strategy_Mutual_NDA.docx
- Size 43KB
- SHA256 b105db17360227d60eaebae139f5f9f76a1bc18a7b106996c3b4a40f9c054715
- MD5 87644815867b3a289401c48cbaf305bb
- SHA1 7142b2157e7ee549de5dd42681781ca981e15b52
- SHA512 a4058bb681d15c0979a3c3c8cde1015e176fb373317e1ea966065cebae3e9cb149f92350c2b31d1d13aa2b2ceaab08c2835414bce990e36ba8999375221d9c9c
- SSDEEP 768:xB5au+YkPlFO8tpNDgjULB1K9pU21OmKJEf1bnb3SKj2HVFkMHjSEnL:xBu1XOcPgjFQ27Hlj21d5nL
- TLSH
  T16E13F131692E4C22C2CFC3B5D1F8374AA5389A59F5057FA37640D3C4AED6684AB2B0C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6