General

  • Target
    Proforma Invoice-309-Ref-284.pdf.7z
  • Size 885KB
  • Sample220816-m7ebqagbdp
  • SHA256 c98ce1b1631ff09c94f09aac3bb518e225dbc50d3a10d79d8f891e3a29ec86cb
  • MD5 SHA1 SHA512
Score
7/10

Malware Config

Targets

    • Target
      Proforma Invoice-309-Ref-284.pdf.exe
    • Size 1.1MB
    • SHA256 db70ee07544744857112a453ccafc8b82745fa014116c72e14103a0f03289cfc
    • MD5 SHA1 SHA512
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks