General
- Target A-Z_20260724002438.zip
- Size 3.9MB
- Sample260724-dnskkazzd1
- SHA256 36d1905f3f5aa9907866544a164579558eec9f61d7a39529c55fdfb75d960950
- MD5 ea131d7e9afe8fa1138ff7d8b4e85e0e
- SHA1 2806e1107c48f09538a2841192f15f4629de8e0d
- SHA512 cd855d532dc5b0228416ce491875b748c7d3e615d7aaf3c95998d60f83d55f977752e85d060466bb3b41df7e564eba6b481055ce38c1f93b8bf70a0b46b115d7
- SSDEEP 98304:JMAFkSuyGewjLzb09WyMUC6KtLXcOrOMJoNjwoz:JMAOSuy3E/bi1dC6oBrfoz
- TLSH T15116334661CEDEC938C7AE3BCA4D44FCBCA6AE5E7724C617829122C441951C1BE77CAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
A-Z_20260724002254.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
A-Z_20260724002254.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
PdFcOrE8.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
PdFcOrE8.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target A-Z_20260724002254.EXE
- Size 3.5MB
- SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
- MD5 cae7e1192eb824214833bb1e8ac092b8
- SHA1 dd2bf5cb2a7c29e4a8b7fb405ec2a9e3e9376e81
- SHA512 9fc3a12887dc3c3b82140b3ef591aad68b3407bfec3e7a292dec2417052069c14976e8fcaeea934dc81d58aca85a583979141c4463aa5924fb7c933d648b122d
- SSDEEP 98304:Yi3bpjg3E9+w1Wf/46VK2CvW+gv0AdIsf/M2Xc5ISM5:DV0w2C7qIsfU2Xc5ISM
- TLSH T198F58D20BAC08036D97216324DAA7739A6BDFE301B35A1D752543E7839307D26D396BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist
-
- Target PdFcOrE8.DlL
- Size 4.4MB
- SHA256 203e5bf78c38e21cc012b654119ab3b61e213d7cb12b2ba0e5b3837d93a3ba13
- MD5 6bd69c67dcd4f76d5daa7c4f12338d1a
- SHA1 5e64a11398cfa50161c296ef39815a4c24eae067
- SHA512 89a38846fa3ad8818f854b89020a826a0bf10e318a514a06c30ab6d48d28933c3a13e86daaf69c35d9897d0841fffb7b18331bf76d3dda8c106f38168fb7799d
- SSDEEP 98304:hg642sYAqmDAbC1U4GhVP1xvJExwDr3cWaGEs:hgOGTDAPhVP1xvJwwDrf
- TLSH T1B426CF12BA40286EF1DF4134591EF294D2FE17A02F68C487D2C8D97D29F59C21BC6EA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10