General
- Target Draft-BL-MEDUxxxx208_pdf.js
- Size 52KB
- Sample260820-jvrjqsgn7z
- SHA256 cb1ceabb57aa66162b3d83e8b3ecabed14c9ddd8e8639b939f88e1589717193a
- MD5 b0125afcece6a003dfcaaedf6438c6ed
- SHA1 502e98ba9d90f89b7b3e06dc5e3884fe00a3afd5
- SHA512 19f9af3b0a4359e734e3d11a27512361ae2f6c8d4d265e34d6dd5ddc364feb1ed70841254ca1a4942529b6c7a889c00a367fcfd7b73300c8898a9136813290c0
- SSDEEP 768:22Vb1dmacSUlfYZWmMNTa2/K++KWK7S73laOkiv8+d9nQ2Wx/VeB8umQ8mE03QLQ:kafKe/dMxdaV8UyfO1UTs0WmgSyt
- TLSH T19333FA0498837844937B6B7FB72A98D8F67607AB0040490BB87C65909FF2D19DEE5CB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Draft-BL-MEDUxxxx208_pdf.js
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Draft-BL-MEDUxxxx208_pdf.js
- Size 52KB
- SHA256 cb1ceabb57aa66162b3d83e8b3ecabed14c9ddd8e8639b939f88e1589717193a
- MD5 b0125afcece6a003dfcaaedf6438c6ed
- SHA1 502e98ba9d90f89b7b3e06dc5e3884fe00a3afd5
- SHA512 19f9af3b0a4359e734e3d11a27512361ae2f6c8d4d265e34d6dd5ddc364feb1ed70841254ca1a4942529b6c7a889c00a367fcfd7b73300c8898a9136813290c0
- SSDEEP 768:22Vb1dmacSUlfYZWmMNTa2/K++KWK7S73laOkiv8+d9nQ2Wx/VeB8umQ8mE03QLQ:kafKe/dMxdaV8UyfO1UTs0WmgSyt
- TLSH T19333FA0498837844937B6B7FB72A98D8F67607AB0040490BB87C65909FF2D19DEE5CB9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Suspicious use of SetThreadContext