7235294aed6da36aadf88f42c43c8df540fb1737f1406c3e6dc1c470a3f5996a

Sharing

Copy URL Twitter E-mail

General

Target
23102026_0352_22102026_DocumentViewer.exe.iso
Size 120KB
Sample261023-efdbcahv6x
SHA256 7235294aed6da36aadf88f42c43c8df540fb1737f1406c3e6dc1c470a3f5996a
MD5 7e1fc46d92ed9d16c469cee63ef22431
SHA1 a01482569302d2f287dd3d0551da603a9bad5d74
SHA512 2bb960e399d2f41c87c47749a6d56e6f69582e1b071c3e69287f07114d34148bde35cbf0b54e2a37f1c70a063d278122a2311accc86734bf6ce7a751c72b1076
SSDEEP 768:ViZUk87FL48sgkdLQiK+t3SJttrNF5b7Ps2iV2+:Vg45SgkaS3WTs2iV
TLSH
T15AC364E17ED84CC7E960623855EAD2223A3EF9D08AA34707B52C16311F13FC16ED9796
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  DocumentViewer.exe
- Size 60KB
- SHA256 ff6d46571ab235df9b818b07b08057da61f3e4769b14f666dcf2b026665948da
- MD5 bf0cd26158a2799089a4bbc97129528e
- SHA1 af1f6b16d344842aa5f1323ba2aff367a8210c10
- SHA512 301cbf32f1a92a1cb329c4efa2e97cf3c006fbbcca82cf7ce9e2f1588570dbb9a479bd11d1b4c6a73d116672bdad4f4568473cc799f050f625ea0394b22cf431
- SSDEEP 768:787FL48sgkdLQiK+t3SJttrNF5b7Ps2iV2+8:A5SgkaS3WTs2iV8
- TLSH
  T16D5372E57ED95CC6ED20633C66EAC221373DFAE08A434B47E52026311B13FD16ED9296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Invoice.pdf.lnk
- Size 2KB
- SHA256 2b4daeb6c406fbc7e5227e4e400a5816b9773493257449ed0a650949fd88d747
- MD5 06672bbeba0b61924a7274aa9ee72d29
- SHA1 925bdd2847ffbdfae0800eab660053de8316fc09
- SHA512 01a0d54a4beedd15f2dac5f7e2597776be6b897062602a95cdd83dcc301b9ce4b5b8104b87fd1e191266fb1ff020e6c4bb373e95dd66ddb2ead9420fc99b02e6
- TLSH
  T12251B3704AAD8B97D3F35973ECEA621B4E7F684AE8B1571A264047CADD01F04AE25F04
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  Invoice_details.pdf
- Size 721B
- SHA256 1737588654762a7a722c3120223757bea6527dff207ea8e21ff2fba030d98000
- MD5 c6632e835b6250f94f52684f10014290
- SHA1 692c4c1b4561d9aa323fbf434e3a9e7c22188299
- SHA512 3732894da73ebeb77d37c025d3ff08d8c6cf6b06748a9f47902957eedaf6f66fef7f80be68333c0d6163d4d244930c7cccd248b62335fa2bbc4a25e193d7608e
- TLSH
  T11101C019F99D5C5CFDC3C951B92F76DA1469710206DC34D2041E2B09A0C5DE9BA837F7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  d440f.cmd
- Size 295B
- SHA256 953304fef02d0386e6379b0262f4b5d02c36c23fdfc02dbe0eb0e5fc578a5e59
- MD5 51eadc27475cf54054a875725c8246e2
- SHA1 5663f9952898ea2c822850d7dcfd3f0b96b91a48
- SHA512 d613cac0c02d1d3ae1f58e53072eed4933b1c789e5be4e5f20ed53e1e0c00b850f93653688508237898687e1ba8f3f48f75327de0a6448c7838ffe97a0b4f8f2
- TLSH
  T1BCE012CA258F203DD8F805897616B6D6B68A92A7B3C9F7D8314D0566448FE15C5C9F02
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Executes dropped EXE
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8