Overview

overview

6

Static

static

3

PdFcOrE8.dll

windows10-2004-x64

3

PdFcOrE8.dll

windows11-ltsc_2024-x64

3

Vat.No.202...10.exe

windows10-2004-x64

6

Vat.No.202...10.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    A-Z_20260727012859.zip
  • Size 4.4MB
  • Sample260727-cm4e1at1hv
  • SHA256 07fddd65e0d85a326608b7096c903efd6ff1ba1037cb538e4c518c3f98739ca8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      PdFcOrE8.DlL
    • Size 5.5MB
    • SHA256 444895f3da82219089234542eb4c63ff3fee6ed2e003007161c648d27bbe59ab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2
    • Target
      Vat.No.20260727012710.EXE
    • Size 3.5MB
    • SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    defense_evasiondiscoveryexecution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks