General
- Target 20260715215731.zip
- Size 3.6MB
- Sample260728-cma4fsw1bs
- SHA256 e31561e3bdec206a4871feb26013d5c741cc4ce01d1b3352afd69dd8e7d247a2
- MD5 77d1d645fd3cd3ef0b1dc4afb84fa65f
- SHA1 b74ee3fe1eeceb71bf660f6a60a389688198e064
- SHA512 d57538a0baeb595ee0c04ba7b2ff4ce7f6e4b83bb274b239602f8a5a7747c43040b0df1f68dfa02c89db29706bf215a82e12553f4714d6099e6476c73e3fee01
- SSDEEP 98304:x3ZYMZR+yMsgM8Rf3cO9R+9vo+HVxQVf2hg6xB3OnJ:pvKhRv/9R+ByB6xB38
- TLSH T1F8063310A99DF0D64ABAFD407D0C447781CE9298C2DA98325EACBE1AC55CFC23DF158B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Vat.No.20260715215731.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Vat.No.20260715215731.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
pdfcOrE8.dll
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
pdfcOrE8.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Vat.No.20260715215731.EXE
- Size 3.3MB
- SHA256 5dabdd4b418ca8b4034b5dea3684da0c10022ca5793c84439e4698e338e25db3
- MD5 13b01f46ec5078298548cdf8380f4c76
- SHA1 8b1af1ebc15b474dc6284f169f9ffdbe7e3cefb9
- SHA512 c64ee8e31261813e1f53a3e572c7759650e81cf36ac80c706da2cf7f6ad060ccb72b83820a7df51637c5248dbd2e5134940fc23ca80c37fe63d68318d63ed60a
- SSDEEP 98304:4xJgBc/Esdil3UQwcvEPiXZqkZMYy16I7Pk7H56s5Qz/S2:4xYxZGxqNW6I7c7H56qkS2
- TLSH T1B2F59E20BAD24076C173113159AAA3797379FA303B3586C7A6913F7D3E302D25D396AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist
-
- Target pdfcOrE8.dlL
- Size 3.5MB
- SHA256 dc3bda4e93d574d8cc207e0f657f6b2ab69f7aa63461c75ae4835cf69068a54a
- MD5 3f4033693322ca9d0151270ece65b10a
- SHA1 71ac9b69bb5ae7cef20b668119d68cda033ceb55
- SHA512 ed1f8f60edc38d493ffe680a5c5b05de2ff0cbe99fad16dbafe3bbf6c57d2c5ef1857c381a8a515554c334ab31b69e7390ec819ca20f708592798f2b18f64eda
- SSDEEP 98304:9uKfOw0YRvCjyM0l8dAUpX17Xf+Bwv7YtYXeELps5KnB:9uPY4jPdAUpX17WsleSsc
- TLSH T10606BF01B94DCCBAF55B0A315939F2A9F1BE55A00F3CC1DFD284D61C293A4E2B92499F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.