General
- Target Draft copy Documents RefNo49805 Pdf.js
- Size 578KB
- Sample260828-q2pr2sdb45
- SHA256 9802baffac7cebadb6cb7cd340cca6e74a659699eb40a4ad95b885ab775bc71c
- MD5 476968b0df89217a6eb7fcfc4245d9da
- SHA1 fa860346f68552a14efe1b4943e145ac51044182
- SHA512 ccf6ce2dd10d158821b30e3c3750d6ee2649b45f116034d5d6b377c6ff963a24a86d4593f54d5caf493ab9d39c526314570fd87588e51bba75f3f608c6869372
- SSDEEP 12288:5hfp46kqQhM0UCOVd7v+k4MBPj9/LESSEN/:vhuGnfT/
- TLSH T18BC4332167FE5119F2F36F54AEF825A58D7EBEA26E3AD05C1150024E0A72E80DDB0737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Draft copy Documents RefNo49805 Pdf.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Draft copy Documents RefNo49805 Pdf.js
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Draft copy Documents RefNo49805 Pdf.js
- Size 578KB
- SHA256 9802baffac7cebadb6cb7cd340cca6e74a659699eb40a4ad95b885ab775bc71c
- MD5 476968b0df89217a6eb7fcfc4245d9da
- SHA1 fa860346f68552a14efe1b4943e145ac51044182
- SHA512 ccf6ce2dd10d158821b30e3c3750d6ee2649b45f116034d5d6b377c6ff963a24a86d4593f54d5caf493ab9d39c526314570fd87588e51bba75f3f608c6869372
- SSDEEP 12288:5hfp46kqQhM0UCOVd7v+k4MBPj9/LESSEN/:vhuGnfT/
- TLSH T18BC4332167FE5119F2F36F54AEF825A58D7EBEA26E3AD05C1150024E0A72E80DDB0737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.