Extracted

• • Target
    NOTICE OF DOF ADJUSTMENT FOR IMPORT SHIPMENTS FROM 01 OCT 2026-SITC.pdf.js
  • Size 484KB
  • SHA256 13a9edbeab08550925137a024ba0a20bffed87e0e09bb49417367b54df021e78
  • MD5 8bb9439d76aa6ed78dd8659146d961ee
  • SHA1 32f497d619236a790b400ccaad743213c71f4282
  • SHA512 2b1f6a677666cd23119e173e74725e0b3d8f18dfac74d92f3930ba9125fdfeb980fff4dc0b4af95646816809b7344e1cb1eba12dc06435ba20060ddb2eff839a
  • SSDEEP 768:N8ptVmA6t7iigTEDFgXzkuTvSJDekbURbY6+ezbyVbN0:Nk+2BTvSJyDbP+B0
  • TLSH
    T1BBB49E115F427451D43992447FC16CC3DCA7A33D68E74B26F29F023737AE8A4A89A87B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  executionpersistenceprivilege_escalation

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Creates a file in the Startup directory

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2