General

  • Target
    20260715215731.zip
  • Size 3.6MB
  • Sample260728-cma4fsw1bs
  • SHA256 e31561e3bdec206a4871feb26013d5c741cc4ce01d1b3352afd69dd8e7d247a2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Vat.No.20260715215731.EXE
    • Size 3.3MB
    • SHA256 5dabdd4b418ca8b4034b5dea3684da0c10022ca5793c84439e4698e338e25db3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

    • Target
      pdfcOrE8.dlL
    • Size 3.5MB
    • SHA256 dc3bda4e93d574d8cc207e0f657f6b2ab69f7aa63461c75ae4835cf69068a54a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks