General
- Target NEW_INCOME_DOCUMENTS AVAILABLE FOR ([email protected])copy.pdf
- Size 4KB
- Sample261104-tecezsdh52
- SHA256 5ebf5aa72a5ea2af5d495aac544a54c6cb9ff92454e7342646aefe0fbec52af4
- MD5 9d9e715cb1208b700333935577928ced
- SHA1 f55f60c03065636ce7e099d5118e5e6bd6d867cd
- SHA512 21c015bfa1d9f5716e954ae90f86a4d8a81d00a8980c2ce86fe075c98cc351bf3733cab365fa5f886a00f01b388c0ecff17d2e02216e6edd0ae6a1938dacf30a
- SSDEEP 96:p3PmLHDeLffQI6CIfGzYOYmatj5bQ6/ZaWh6JnC:E8f9Iv1lXZveC
- TLSH T119A1EFADAE8F749FA096C945CB8A34C81B1FF21232D854F1111CA51A8483DE8FB77D5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
NEW_INCOME_DOCUMENTS AVAILABLE FOR ([email protected])copy.pdf
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEW_INCOME_DOCUMENTS AVAILABLE FOR ([email protected])copy.pdf
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target NEW_INCOME_DOCUMENTS AVAILABLE FOR ([email protected])copy.pdf
- Size 4KB
- SHA256 5ebf5aa72a5ea2af5d495aac544a54c6cb9ff92454e7342646aefe0fbec52af4
- MD5 9d9e715cb1208b700333935577928ced
- SHA1 f55f60c03065636ce7e099d5118e5e6bd6d867cd
- SHA512 21c015bfa1d9f5716e954ae90f86a4d8a81d00a8980c2ce86fe075c98cc351bf3733cab365fa5f886a00f01b388c0ecff17d2e02216e6edd0ae6a1938dacf30a
- SSDEEP 96:p3PmLHDeLffQI6CIfGzYOYmatj5bQ6/ZaWh6JnC:E8f9Iv1lXZveC
- TLSH T119A1EFADAE8F749FA096C945CB8A34C81B1FF21232D854F1111CA51A8483DE8FB77D5A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A potential corporate email address has been identified in the URL
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1