General
- Target 24082026_0918_22082026_سند پیوست جهت بررسی و امضاpdf.rar
- Size 121KB
- Sample260824-k93e8aem2x
- SHA256 a247e0525bee5ee1f7304b5559c8ca2a7f43a83518e9edec9fc47889f737aa67
- MD5 820a338d77f6727af57b395760b94622
- SHA1 9ef19536a625d83b2860afef59cec0aaff47cfd6
- SHA512 bac9b423834d88e28a435bef515f673c120b54a0b6116996d2381248105f2e417ce65c4d1fd30d46bad6e56f5df8fbf1654db7ac9f7035a2d395aab3442b2b34
- SSDEEP 3072:DttxHLLhbmwmFmpGKDapZ/kezqrY18B2uD/Go7jdeCuk:Vda95H/kgqU1xbEeCZ
- TLSH T17FC3125E13FD21C9904FB41954F3B6DED812E6D1F0A4F9BF306B06A96910983F88B8B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
سند پیوست جهت بررسی و امضاpdf.js
Resource
win10v2004-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
سند پیوست جهت بررسی و امضاpdf.js
Resource
win11ltsc2024-20260709-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target سند پیوست جهت بررسی و امضاpdf.js
- Size 2.0MB
- SHA256 346fb6182653bc824067fa2752028a5c6a432d3ee6bcd954070113b95026fa4b
- MD5 a1562e64f7071b58f3690de5b36fda78
- SHA1 4ec507beffa918a9cd05233fe21894c9b73eedc9
- SHA512 bf1181a70943f559c1c558aec4d374bc6f758a4cfd0083131f9c56fc3eb9b0687e79840c9778b7bc59704370d9eb5aebb88a5379b723ca69daa00b5f9c3cd84f
- SSDEEP 6144:8fbtRh8cwoHxi2dDApxDJvJk9yX8JdRtV6WHx1UTyZ:8fbtRhdHg2dDApFJxk9ysJ7tEWR17
- TLSH T11FA5C83EEF8171ABD632C9114BC57013C19BBB43136E489C18DA1F9C0AD628A7ED665F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.