General

  • Target
    18072026_0937_Vat.No.20260715231017.EXE.iso
  • Size 6.7MB
  • Sample260718-lll9rsft4m
  • SHA256 146c37f3f478f9c320ea486e13be7d527c5574666a8dcec920ca7b3867f3b1de
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Vat.No.20260715231017.EXE
    • Size 3.3MB
    • SHA256 5dabdd4b418ca8b4034b5dea3684da0c10022ca5793c84439e4698e338e25db3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

    • Target
      pdfcOrE8.dlL
    • Size 3.4MB
    • SHA256 7c1ab2209ed95a0a98fb5c23e007b3bf3e8a7e7f8424a5cf5ff3331dac6ae4d7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks