General
- Target 20260721074431.zip
- Size 3.7MB
- Sample260721-pgmaratsay
- SHA256 3e68ad68d4186a5a8cbb0471390879cfb05cfa2de35ae77b23cacfa3faed875b
Score
7/10
Malware Config
Targets
-
- Target VAT_N0.20260721074047.EXE
- Size 3.3MB
- SHA256 5dabdd4b418ca8b4034b5dea3684da0c10022ca5793c84439e4698e338e25db3
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist
-
- Target pdfcOrE8.dlL
- Size 3.5MB
- SHA256 65afea4c7fd6bcb11081821217408da84012897d2e74b9cdb32ee6e99ac6a4c2
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.