aa1b45d0c5384d740c625c907b3f44ada18b0230f6e8dea33935ebd3db3ac72c

General

Target
20260729104357.zip
Size 4.0MB
Sample260729-phxswagd83
SHA256 aa1b45d0c5384d740c625c907b3f44ada18b0230f6e8dea33935ebd3db3ac72c
MD5 df288f5680e842a615c8b898e21b8e73
SHA1 7f83c20cb36b8a730e7f464cb73cbae41eb671c5
SHA512 5c879cee4ded777de18f834c4bc5968738e8b904391ff68f73d0198d022ed4027cb0ed91a0be649ac212bc147ac01f8680848815639341e8859bbe555d8e3996
SSDEEP 98304:uelhHkyoYGL9GokPw9y9VkqN1mNSxZk/R2CtCxN5eEQoULvJk1:u0TGxd9yVkKmskMxy4U14
TLSH
T1931633F1A29097E859A53BB0EEB6BE5494109046023C12871BEF45F5522F7923FCCEF6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  PdFcOrE8.DlL
- Size 4.5MB
- SHA256 5b1055911b6e1fe50d5fe3a726cfab2e79c056da705885bee6ee029d83799c2c
- MD5 1128968a0e7f159b6d19af6f675fdfe1
- SHA1 908cba99e948101830ef13501eb684780a6dc62e
- SHA512 c916f5fca9dcd78d11e31562932a1e6c43b88a01c477f33ce045d8e4fb17cd12437fd7da9b663938262f8542dec52d517f647441c60fd7af055f24477f31e0b4
- SSDEEP 98304:/Z74Ma7QIacnJGws44BWdvUwoew5xGJuwE63WaGc0:xibacJ2woew5wrE6mM
- TLSH
  T14F26CF127DD14C7EE2D703344A1EF229A2EE97F42F28C40BE2C8DA2D39746526746D67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  VATN0.20260729104342.EXE
- Size 3.5MB
- SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
- MD5 cae7e1192eb824214833bb1e8ac092b8
- SHA1 dd2bf5cb2a7c29e4a8b7fb405ec2a9e3e9376e81
- SHA512 9fc3a12887dc3c3b82140b3ef591aad68b3407bfec3e7a292dec2417052069c14976e8fcaeea934dc81d58aca85a583979141c4463aa5924fb7c933d648b122d
- SSDEEP 98304:Yi3bpjg3E9+w1Wf/46VK2CvW+gv0AdIsf/M2Xc5ISM5:DV0w2C7qIsfU2Xc5ISM
- TLSH
  T198F58D20BAC08036D97216324DAA7739A6BDFE301B35A1D752543E7839307D26D396BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral3 behavioral4