Overview

overview

6

Static

static

3

PdFcOrE8.dll

windows10-2004-x64

3

PdFcOrE8.dll

windows11-ltsc_2024-x64

3

Vat.No.202...26.exe

windows10-2004-x64

6

Vat.No.202...26.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    20260727014334.zip
  • Size 3.8MB
  • Sample260727-aj22nage74
  • SHA256 6bc72ae091550c4070f30f239555d7a8b8bb92831482dcef145bc6c4c4866500
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      PdFcOrE8.DlL
    • Size 5.5MB
    • SHA256 0ab5b5c9ac10f99e1637ce6d1a0e49738c6588461e1b044553d970d311faa652
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2
    • Target
      Vat.No.20260727074826.EXE
    • Size 3.5MB
    • SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    defense_evasiondiscoveryexecution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks