Overview
overview
4Static
static
4Cofense_On...al.pdf
windows10-2004-x64
3Cofense_On...al.pdf
windows11-ltsc_2024-x64
3Cofense_On...22.pdf
windows10-2004-x64
3Cofense_On...22.pdf
windows11-ltsc_2024-x64
3Cofense_On...22.pdf
windows10-2004-x64
3Cofense_On...22.pdf
windows11-ltsc_2024-x64
3Global VPN...ta.key
macos-10.15-amd64
1Global VPN...ta.key
macos-10.15-amd64
1Cofense_On...ta.key
macos-10.15-amd64
1Cofense_On...ta.key
macos-10.15-amd64
1Cofense_On...ot.pdf
windows10-2004-x64
3Cofense_On...ot.pdf
windows11-ltsc_2024-x64
3General
- Target attachment20260930-527357-y2bx4g.zip
- Size 1.5MB
- Sample260930-121veszwat
- SHA256 7590ec87d3819d690daf9b70ea23d6ddee43b5ddc1fbc210bba077022a0fd200
- MD5 86a4623261055f14c21da3085f79e39b
- SHA1 2b6f65d529cec6d9320afaf351033ca09bedb9c6
- SHA512 528a2a49eec8ab211a7c3b79061b47f875ea175ca8e8e5d1fc0f30e705e37f5f5ff96046e6deb2d898f09adcda392be02fbac0fe44cc3c205e325b3a8b3843ba
- SSDEEP 24576:nv9SlTb8yJpAIkh7BWj7h5u85HazdmDALfvXmrkv3bAL/3W8g0xtw1wh/X3gFwHJ:nV2pAth7Bi75Hap7b/jbCNHtTh/AaxT
- TLSH T13C753394B544F5D1C32C2F32E284845683AB5C945BFF1792BACEA8530BFCAE5AF46431
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Cofense_Onbording/COFENSE GLOBAL CODE OF CONDUCT_12-30-22_Final.pdf
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Cofense_Onbording/COFENSE GLOBAL CODE OF CONDUCT_12-30-22_Final.pdf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Cofense_Onbording/Cofense Global Export_Sanctions_AML Policy_Final 12-2022.pdf
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Cofense_Onbording/Cofense Global Export_Sanctions_AML Policy_Final 12-2022.pdf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Cofense_Onbording/Cofense Global Gifts and Entertainment Policy_Final - 12-2022.pdf
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Cofense_Onbording/Cofense Global Gifts and Entertainment Policy_Final - 12-2022.pdf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Global VPN - Full Tunnel v4/ta.key
Resource
macos-20260915-en
Behavioral task
behavioral8
Sample
Global VPN - Split Tunnel v4/ta.key
Resource
macos-20260915-en
Behavioral task
behavioral9
Sample
Cofense_Onbording/Global VPN v4/Global VPN - Full Tunnel v4/ta.key
Resource
macos-20260915-en
Behavioral task
behavioral10
Sample
Cofense_Onbording/Global VPN v4/Global VPN - Split Tunnel v4/ta.key
Resource
macos-20260915-en
Behavioral task
behavioral11
Sample
Cofense_Onbording/self-guided-new-hire-setup - mot.pdf
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target Cofense_Onbording/COFENSE GLOBAL CODE OF CONDUCT_12-30-22_Final.pdf
- Size 179KB
- SHA256 5733042a7cb89c2b271e3248af42a1085bc6058f2712f1fb7487dd583dc6672b
- MD5 0f4ffb439a2b0fd68479d417242e455a
- SHA1 87a70cfd781fe0cd366ab5a2795ab7ca20269e0f
- SHA512 4d89eced5c5d4d2e7fd5c71b5c3b33355e749cf107b2518b5e971ab5760ff5022f24b7a129c1de77c37df05be721f9cdad58afeddea57a20e0a49971db8e3860
- SSDEEP 3072:Yk2RWutrv7gB3+qHbIwcd4S8nguPlqFFpLyEw5nDzBQD2jniF1P/pIV2YA5Q7:Yk2db8B33tcd4SIPlq93w5fBQajiFl/g
- TLSH T1DC041219A6D6B8AC4157B3253B6B0B414E8F88DB1A4F34D63A4C81C44721DA7F3B0DBB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Cofense_Onbording/Cofense Global Export_Sanctions_AML Policy_Final 12-2022.pdf
- Size 212KB
- SHA256 9ba9e3340c98352f4cde939781e6f6591cfb30937c5e8c849e5f8b6bdedf85df
- MD5 8d179ea36e4fd2e3f5fb183a738189f3
- SHA1 d8cde154888c453824fdff04669aef83ac2cd390
- SHA512 3f627b8922fc697c80302c4dc3c0e495b4c6eda6693c89c09b1f4e7ff56de340325a70de2539e3d2784c24b765073b88173efdda03709bf5b7b6c4c9538ac706
- SSDEEP 6144:egCIlkn1rXUUwuPAmtpAsB8BgYhUbRZBIr:Q6WJP1pAsFZBIr
- TLSH T15F2412CC5D52BCCD80957924631E5AE18DC780F9660FA85536CCCAC94F02EA6FAA44FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Cofense_Onbording/Cofense Global Gifts and Entertainment Policy_Final - 12-2022.pdf
- Size 152KB
- SHA256 43965948f87fedea2466f22a68af922966e6938b4c618a130b6058a307bad5fe
- MD5 17317572258a7ef2d6420140a280044b
- SHA1 4700ece8c48809c9c139689309153ee6df811752
- SHA512 d00e0576294c13eb48f0db01bc5e4ae64af0dedd80d12e06ec5dfe2b8fc1c2eba67b8fd90ec8b9170cd5ca9386db9445ffa1f07737ff7de0bd608a85554049aa
- SSDEEP 3072:2vx/ODFF7PavjtXsBGNMBxpzeJnoL/24kSzVJp5Se2CdOW3uyzO6Js:cUFLa5cwIpzeJnoL/TGe2CdOUO6Js
- TLSH T193E312485F25EEA884C92E21770C5B82F29761FBC00CE817BAED87C60716DE6D455C7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Global VPN - Full Tunnel v4/ta.key
- Size 657B
- SHA256 11542046ff465e3b1b22e169ae584e138b64f89f0be5ea31992e99c7cacb7368
- MD5 200e5cf2c8a8f4ac4a02b7135ddea813
- SHA1 f47e921c116a2aa305f81bf0034f8d9965852d5d
- SHA512 91e0aaedff2e67cea1f4283aaaf62ecf19cc89768e56f72d11aa2974f9d6ffb0be8a2e7832066d92082a21fb030d5651c2fd74c6c89ec4234c7974fd6ed2a1e6
- TLSH T14F012367FEA8E491CD4DD4D37FD24636C73B5A01258D642340EA32032AB1B917B4CD64
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Global VPN - Split Tunnel v4/ta.key
- Size 657B
- SHA256 c6ae569b946e49b56225b3570dd7db582fa11d8c8e27d891e6d7d3433cf17c04
- MD5 aa0aad8a42129103d08d2bcf3ee82368
- SHA1 d5de9134677705bc650768b25e73412354aa0593
- SHA512 27a5a86f132d44c21063907e11996917aad38dae25539c7c95fc218feb3fd1b478cc01c41bbd8d81f6e9e07d1f4284af062964aa5730747f4207fce1a2488a04
- TLSH T16701FE079FD5CE07887CE71BE5260517CE1A056B22C85E07607281403C66585EB8EC34
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Cofense_Onbording/Global VPN v4/Global VPN - Full Tunnel v4/ta.key
- Size 657B
- SHA256 11542046ff465e3b1b22e169ae584e138b64f89f0be5ea31992e99c7cacb7368
- MD5 200e5cf2c8a8f4ac4a02b7135ddea813
- SHA1 f47e921c116a2aa305f81bf0034f8d9965852d5d
- SHA512 91e0aaedff2e67cea1f4283aaaf62ecf19cc89768e56f72d11aa2974f9d6ffb0be8a2e7832066d92082a21fb030d5651c2fd74c6c89ec4234c7974fd6ed2a1e6
- TLSH T14F012367FEA8E491CD4DD4D37FD24636C73B5A01258D642340EA32032AB1B917B4CD64
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Cofense_Onbording/Global VPN v4/Global VPN - Split Tunnel v4/ta.key
- Size 657B
- SHA256 c6ae569b946e49b56225b3570dd7db582fa11d8c8e27d891e6d7d3433cf17c04
- MD5 aa0aad8a42129103d08d2bcf3ee82368
- SHA1 d5de9134677705bc650768b25e73412354aa0593
- SHA512 27a5a86f132d44c21063907e11996917aad38dae25539c7c95fc218feb3fd1b478cc01c41bbd8d81f6e9e07d1f4284af062964aa5730747f4207fce1a2488a04
- TLSH T16701FE079FD5CE07887CE71BE5260517CE1A056B22C85E07607281403C66585EB8EC34
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Cofense_Onbording/self-guided-new-hire-setup - mot.pdf
- Size 1.1MB
- SHA256 6a579d1e4523e3f258a1fad0ebbd43ce6e1ebfd4482a776924a143f2b19883fe
- MD5 591fba4fa41199dbe192b26b8152baa6
- SHA1 9bfdae93bb404db8b9f880a1d473bf97615fe738
- SHA512 bf6e27f7ac9cd153e45f65638813161d0b1098dcf21ab36822cc9d9c243ac00b22d36a296af5038d1c5c68e35be70aea1bfd02d684a6c65166b1f8cf8ba78402
- SSDEEP 24576:wyuafeg3q3b8e4cMrgVftsbLFccccc27t:w/am45JmsbLxt
- TLSH T11235E00388186DCFD22943F47F0B3C6A7A5EB265E0C566F6322CCF872750E6A5C4B55A
- MD5 SHA1 SHA512 SSDEEP TLSH