General
- Target OP-2602-02-001 MBL & HBL SURRENDEERED REVISED OB.PDF.exe
- Size 1.8MB
- Sample260320-gr5abaay8k
- SHA256 3a74f69b838484e036e7fe64ebaf2ecce077d7d3e6b2449a20a92350a18e6fe6
- MD5 2d0ceabc9e8e215dc7cb2f1098f3fdce
- SHA1 0a02c32be66dcf038993e53c6b115827bb122e7f
- SHA512 594850e805af085c7747e39a4b4e4d2b97e3b5c881d701962718e0a7ffea1088b9657bb51b10cf80bd3fa52bcdb23fd86857dd3b9ae29b7d59abdb813264200c
- SSDEEP 24576:xCZGvW0tK4jReYSTQ+zYAGRw5bUkGDjkNrnoqAas1cNUtwLID0Lpu8XcWJ8Y9iva:21H4jR2TYrQbDTrnoyO4FcmZMlp
- TLSH T10285CF0573E442EDFEABE1768A13C507C7B17C450677861F06A0AA766F33B716A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
OP-2602-02-001 MBL & HBL SURRENDEERED REVISED OB.PDF.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
OP-2602-02-001 MBL & HBL SURRENDEERED REVISED OB.PDF.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target OP-2602-02-001 MBL & HBL SURRENDEERED REVISED OB.PDF.exe
- Size 1.8MB
- SHA256 3a74f69b838484e036e7fe64ebaf2ecce077d7d3e6b2449a20a92350a18e6fe6
- MD5 2d0ceabc9e8e215dc7cb2f1098f3fdce
- SHA1 0a02c32be66dcf038993e53c6b115827bb122e7f
- SHA512 594850e805af085c7747e39a4b4e4d2b97e3b5c881d701962718e0a7ffea1088b9657bb51b10cf80bd3fa52bcdb23fd86857dd3b9ae29b7d59abdb813264200c
- SSDEEP 24576:xCZGvW0tK4jReYSTQ+zYAGRw5bUkGDjkNrnoqAas1cNUtwLID0Lpu8XcWJ8Y9iva:21H4jR2TYrQbDTrnoyO4FcmZMlp
- TLSH T10285CF0573E442EDFEABE1768A13C507C7B17C450677861F06A0AA766F33B716A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE