General

  • Target
    Draft copy Documents RefNo49805 Pdf.js
  • Size 578KB
  • Sample260828-q2pr2sdb45
  • SHA256 9802baffac7cebadb6cb7cd340cca6e74a659699eb40a4ad95b885ab775bc71c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Draft copy Documents RefNo49805 Pdf.js
    • Size 578KB
    • SHA256 9802baffac7cebadb6cb7cd340cca6e74a659699eb40a4ad95b885ab775bc71c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks