General
- Target EDIUS Contract.docx.scr
- Size 524.5MB
- Sample260930-299b7swclb
- SHA256 8cc6d7feab78023d8151f53ffe23139cd1ebebdcb473051eb34b78067fb7bf2e
- MD5 2910e4adf1bb22f63c23a47b2b87077d
- SHA1 2bc909af832e082b1ce7386f5aac7b860aaee0e3
- SHA512 572ed2bce07ffefcbf06cfccaa8836e5e31b4e87fcfb4042ae5549a863a12d9b4ff7e393f95083160e647800f4b5fde365cd701fd131cc091584886db1dbade2
- SSDEEP 6144:jTvQ/BKYnRrOEDNR3IYms2EsC0Hg5HppJ1MWbI6v5k3uHy1ew/XzryHbfjyccxig:jTvQ/IYRbNZsH8dyW3mXzMjyccHR
- TLSH T145491C805BAC1A31D5EE2A3294F13B0987B4F651B7BEE34F3049B9954E377424982B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
EDIUS Contract.docx.scr
Resource
win10v2004-20260911-en
11 signatures
300 seconds
Behavioral task
behavioral2
Sample
EDIUS Contract.docx.scr
Resource
win11ltsc2024-20260911-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target EDIUS Contract.docx.scr
- Size 524.5MB
- SHA256 8cc6d7feab78023d8151f53ffe23139cd1ebebdcb473051eb34b78067fb7bf2e
- MD5 2910e4adf1bb22f63c23a47b2b87077d
- SHA1 2bc909af832e082b1ce7386f5aac7b860aaee0e3
- SHA512 572ed2bce07ffefcbf06cfccaa8836e5e31b4e87fcfb4042ae5549a863a12d9b4ff7e393f95083160e647800f4b5fde365cd701fd131cc091584886db1dbade2
- SSDEEP 6144:jTvQ/BKYnRrOEDNR3IYms2EsC0Hg5HppJ1MWbI6v5k3uHy1ew/XzryHbfjyccxig:jTvQ/IYRbNZsH8dyW3mXzMjyccHR
- TLSH T145491C805BAC1A31D5EE2A3294F13B0987B4F651B7BEE34F3049B9954E377424982B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.