General
- Target JUSTIFICANTE DE PAGO.pdf.exe
- Size 1.3MB
- Sample261113-pd1zqsbs8y
- SHA256 1c0794f74cd0520dfa1580112d904fa39cb7ae062c10904743f7bd0422384a4a
Score
7/10
Malware Config
Targets
-
- Target JUSTIFICANTE DE PAGO.pdf.exe
- Size 1.3MB
- SHA256 1c0794f74cd0520dfa1580112d904fa39cb7ae062c10904743f7bd0422384a4a
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Drops file in System32 directory
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 25KB
- SHA256 14a2ba8f2ba490c1ac67551f28b859f4f07338a5fc0f291525d926ee4d973b8f
Score1/10