Overview

overview

10

Static

static

6

2b41f892fe...0e.pdf

windows10-2004-x64

3

2b41f892fe...0e.pdf

windows11-ltsc_2024-x64

3

.has been ..., .xls

windows10-2004-x64

10

.has been ..., .xls

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2b41f892fe2018143f3e77ffaacc212218b01f47328e3528330ba5abf6176c0e.bin
  • Size 1.1MB
  • Sample260910-fycm7sff89
  • SHA256 2b41f892fe2018143f3e77ffaacc212218b01f47328e3528330ba5abf6176c0e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
adwarediscoveryjavascriptpdfpersistenceransomwarespyware

Malware Config

Targets

    • Target
      2b41f892fe2018143f3e77ffaacc212218b01f47328e3528330ba5abf6176c0e.bin
    • Size 1.1MB
    • SHA256 2b41f892fe2018143f3e77ffaacc212218b01f47328e3528330ba5abf6176c0e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspywarepersistenceransomware
    behavioral1behavioral2
    • Target
      .has been verified. However PNG, PDF, docx, .xls
    • Size 1.2MB
    • SHA256 15c8bd16bc07a3981337508eb27bcdff74c17c0a1e3704e8f23f8e6da2e5bdee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    persistenceransomware

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks