General

  • Target
    24082026_0918_22082026_سند پیوست جهت بررسی و امضاpdf.rar
  • Size 121KB
  • Sample260824-k93e8aem2x
  • SHA256 a247e0525bee5ee1f7304b5559c8ca2a7f43a83518e9edec9fc47889f737aa67
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      سند پیوست جهت بررسی و امضاpdf.js
    • Size 2.0MB
    • SHA256 346fb6182653bc824067fa2752028a5c6a432d3ee6bcd954070113b95026fa4b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks