ee185da0b05734232c19974b6125f7895d3c442ad63cbd629ca60cdbb81435f0

General

Target
P20260728115309.zip
Size 4.5MB
Sample260729-akhpeazdph
SHA256 ee185da0b05734232c19974b6125f7895d3c442ad63cbd629ca60cdbb81435f0
MD5 1a61a03f95a1b4c7407021cdbd2cefb4
SHA1 6d8d3042944c95dee25a6adfa05c19f446648921
SHA512 9f68ada833c94638dea046fb3266af1bf7b93b8b0e3bd4808bb070d99853b6829f6075b0fc2547993ccd463f3d0517d3ee0a30f772e42e55a765b8bff43ecd8c
SSDEEP 98304:2AXf70coCTwe4wjfyPhkM/4QiM/7TVWFrTh/BjFzEmsWIxGii:2AX3fkehuPCM/HVATjREmsWZb
TLSH
T1272633944BBB0F0BC9077BC52E42FA5560E5B9B186C11E6FE0A406C96533D2BBE48F07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  PdFcOrE8.DlL
- Size 5.7MB
- SHA256 1699ae2c269de4f3568f96f1b8f7b4ece66cbe68909c3e1035813fd7f676c15c
- MD5 2fd23604839af37d62d4fe8ee129eba0
- SHA1 09a038f913477bcac496eb4928b9cce822e02468
- SHA512 b5019273137e51db5eec28601a90648e83e52c9bab8fec03c60b218905200024381aa9e857e489cdd3c71e6c1cbfc57f23ea007c16aa93de3416b264b9cc04cc
- SSDEEP 98304:ZRuLfVfs8eP6CrXX7u4nyXcezHjs7SaL+bgWaGu:ZRKK8e9tqcezHUGT
- TLSH
  T12C56CF117DD1483BD2DB0B30491EF62872EE97B12F74488BD6DC4A2C6E346A32716E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  VATN0.20260728115218.EXE
- Size 3.5MB
- SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
- MD5 cae7e1192eb824214833bb1e8ac092b8
- SHA1 dd2bf5cb2a7c29e4a8b7fb405ec2a9e3e9376e81
- SHA512 9fc3a12887dc3c3b82140b3ef591aad68b3407bfec3e7a292dec2417052069c14976e8fcaeea934dc81d58aca85a583979141c4463aa5924fb7c933d648b122d
- SSDEEP 98304:Yi3bpjg3E9+w1Wf/46VK2CvW+gv0AdIsf/M2Xc5ISM5:DV0w2C7qIsfU2Xc5ISM
- TLSH
  T198F58D20BAC08036D97216324DAA7739A6BDFE301B35A1D752543E7839307D26D396BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral3 behavioral4