General
- Target 9884f2ece43025816f8e11cbcc196409b6256f015911a04880b10fff576763d4
- Size 3.2MB
- Sample260907-e8w9xsw1et
- SHA256 9884f2ece43025816f8e11cbcc196409b6256f015911a04880b10fff576763d4
- MD5 f18ba78333cb9b3778f0f8cde386d579
- SHA1 8b6959b6614cf50341ba67b6322889ddd1e9f8bb
- SHA512 22046d53bd207d2c56c2d5e2dc14d778d0ac04abf380ea0a411f6593f180ef64bc571409fe65d73d2473d83f86d59e26aa16c54fb96750a32a2f7e79b11d7d3b
- SSDEEP 98304:cpbJpOdH+8M3qjHEUQoaLvfz8SwgRLUnhBH8:ezOl+8tjFefz8SbdUhBc
- TLSH T1EDF5337C42E63BCD664C536132AE89F8BA1F5CC6015C805ACB1BEC60677E339F99946C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
ការប្រកាសពន្ធ-PDF.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
ការប្រកាសពន្ធ-PDF.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ការប្រកាសពន្ធ-PDF.com
- Size 3.7MB
- SHA256 bb8718263c61097a46bef3ad72d07f9e14501691af75ecb064f17962ef35582a
- MD5 84f4a7a28da44803872c75d10fadbf30
- SHA1 2c35a846c3b1cd39debe81442ef6c9387aec43b5
- SHA512 e4ee3d0fe327955f50b83f8060f9e82cc9ad3d2640e9d9e2b1a664fcac66648e128ab39f4718ea8559b170eff42780f037e053603b602661c4ab301f5a595d33
- SSDEEP 49152:puI2h0m17e+jmCF4ZqYIHEhx0h2LYxGZPmE3feOz9GS5xG/Ygh0foSL3rdf/rVlm:p5Ol9yg4ZqHHE22kwL3fDGSqgm2rJztM
- TLSH T11A06023FA28B753EE06E1A367A76E210583F7A6165264C16D7F4C88CCF251701E3E786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Modifies RDP port number used by Windows
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled