General

  • Target
    20260721074431.zip
  • Size 3.7MB
  • Sample260721-pgqceavgre
  • SHA256 3e68ad68d4186a5a8cbb0471390879cfb05cfa2de35ae77b23cacfa3faed875b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      VAT_N0.20260721074047.EXE
    • Size 3.3MB
    • SHA256 5dabdd4b418ca8b4034b5dea3684da0c10022ca5793c84439e4698e338e25db3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

    • Target
      pdfcOrE8.dlL
    • Size 3.5MB
    • SHA256 65afea4c7fd6bcb11081821217408da84012897d2e74b9cdb32ee6e99ac6a4c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks