Overview

overview

6

Static

static

3

20260727075219.zip

windows10-2004-x64

1

20260727075219.zip

windows11-ltsc_2024-x64

1

Vat.No.202...00.iso

windows10-2004-x64

3

Vat.No.202...00.iso

windows11-ltsc_2024-x64

3

PdFcOrE8.dll

windows10-2004-x64

3

PdFcOrE8.dll

windows11-ltsc_2024-x64

3

Vat.No.202...00.exe

windows10-2004-x64

6

Vat.No.202...00.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    20260727075219.zip.crdownload
  • Size 4.4MB
  • Sample260727-fdshxsgr9y
  • SHA256 4dde71b7852793d98ffea13745f2dbd703d61031c29d526489383bd07c6c624e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      20260727075219.zip.crdownload
    • Size 4.4MB
    • SHA256 4dde71b7852793d98ffea13745f2dbd703d61031c29d526489383bd07c6c624e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      Vat.No.20260727075200.IMG
    • Size 9.0MB
    • SHA256 910a4fc82bfb972f0dd596956ef525d59557c7e1f2dbaed35858bcc0de4620c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      PdFcOrE8.DlL
    • Size 5.5MB
    • SHA256 484dab2b6355b164af6bc205163fa7b38fde2ef16d0d7f7b739c032d1c4af2f7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      Vat.No.20260727075200.EXE
    • Size 3.5MB
    • SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    defense_evasiondiscoveryexecution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks