General
- Target HENS20260730141717.zip
- Size 3.7MB
- Sample260731-g1symseb42
- SHA256 bf3d22fe3caa372aff07acf4f1208cf04678fd5ed905beb194e03f376f1fb6c1
Score
7/10
Malware Config
Targets
-
- Target PdFcOrE8.DlL
- Size 3.6MB
- SHA256 f798a35dd87d1f5f8a9dac10575b53f066b4cc862925ed784f594f44fe37e476
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target VATN0.20260730141712.EXE
- Size 3.5MB
- SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist