1ec7d1c20c93f562405cb4833d12e06357b66865eb13eaf8e43aeb4e71ebe718

Sharing

Copy URL Twitter E-mail

General

Target
1ec7d1c20c93f562405cb4833d12e06357b66865eb13eaf8e43aeb4e71ebe718
Size 518KB
Sample260925-rxexqazz6m
SHA256 1ec7d1c20c93f562405cb4833d12e06357b66865eb13eaf8e43aeb4e71ebe718
MD5 7aa5f78836c596192702e164fbf304fd
SHA1 bddc74cc893a7ab646cb027af60493d34ab1b388
SHA512 b885523ccebbd590711223c7bf8c38dfe47203fe870055da0adbf7b0e5b5413bb4857b9d9302a92a89a996ea1a10484a17b0e8009faf9d1ba15e513b276b8974
SSDEEP 12288:IgOY4+YbZVOdiK9otbwj4XZ6dJObbtRzBPdDdYENULDVbZ:IgDwZo4K+tbwQ6m7t5dZULDT
TLSH
T165B423EE884BE96EC1626075C3AA8EE558E65FF937E7E71B7C08742834144111FFA903
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Выписка ЕГРЮ от 11.04.24.pdf
- Size 119KB
- SHA256 c712a5aedd2a236cbed56e599b95a4df7000d9dae0cf9e9a675f8f40480881f2
- MD5 9510140f7ee5d09475cdd528ec3fbac7
- SHA1 0553c27ff4c1fe506fbd272ccd0a33499a63ffb1
- SHA512 6468d9f95fd4b95b762715ef9f12754d4645bc7cc56f75b2a5bde75a1eb5aba37f671c14a9166a6e2d6108e67dbc7ff106a340f3634e61d777ac5dc2339de949
- SSDEEP 3072:qBASjYFgukwTH1PWcfSCcm4YxtYs+KZ54lAQAWuAI:WASjYFgukwz1PIyKK79
- TLSH
  T198C312678E97D0CCF496C98BBD2D3810C57FF01FCAE8A55188AC4D043951613BA66BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  Запрос-спецификация от компании ООО ФРОВ ТРЕЙД на сентябрь 2026г.lnk
- Size 1KB
- SHA256 c80ddcbe8314a541884fae24e6142279c140a7b9bcc66f8c9ed984c6b5c57d57
- MD5 bb5c5aa8c4cd1d342177662c2d9c4cfa
- SHA1 ac67e37e25f7d19fc76c9d114de480e15c066933
- SHA512 23140e947ecea75d89728a56e0b02801fc9f2440fe19754732cc070db12f9a139fa8349dea2fcaad77d96b109a339fa8380d6bc021d4ca26392f7bfc54afdf0b
- TLSH
  T1B431DF2E9570BCE8C33DB0B194261F565256AA41FB749EF8D5402C747C20221DB2D96D
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Карточка Фров Трейд.doc
- Size 38KB
- SHA256 0fd7af398d4ec82f2178103b808e3a324ac5255be288731573d2c5551a6df1ca
- MD5 ba82784ef2fd7deeca679459f39c77e4
- SHA1 32de78a91652dc9b4c4368dd3c7dd047097637c6
- SHA512 f6d5367cb0d09525961a565a728d63bd47403d73bc01c2b0dda48fdf89c0d1ac8875784fa977c0ebd689a13446db972ae9de3c8358821475a9a278548fbde6c4
- SSDEEP 384:FuPSQKdKRK3KCKrKFKM9tU+EwKoKNKVKBKAL1TrJQiiS6QwMXFP+:FuPQkw6tWMOi/X08ArQwM
- TLSH
  T134033156FFD4BF23C2E2453994A5C355972FEC91CBAAC393309A3B1B6C300A91D43A95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Свидетельство о постановке на налоговый учет.pdf
- Size 423KB
- SHA256 e40d808b88b34832c5031b31cba209ba73c0cb303eb5aa1ea81a7fd943773ec5
- MD5 bb640d5b2bc2785830fe9ee94fd8c1cd
- SHA1 1d0345029870c0f515bcc432124c7cfe584ed1a7
- SHA512 0bc2b3e6443a7ffaeacdd8cb608b5da0b3038cf89adaeefbde4797c7f0d51793ae04b6e7932e3f34534056ad52fc42bdd1bd0c61df39b5e3259783c8b8261ac9
- SSDEEP 6144:ynuxh2IHftMzrWBMzFcmrXP9gtuFoiO1RLJlh4FgLvWsnw8+1TA1Yrf:WuxdftalzWwXPNzwZbBwVTxj
- TLSH
  T15794CD431E0381ABE81F86345F42761C2A46540167E393756E783AFFA77C12A5CEFE86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

Checks computer location settings

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8