General
- Target 20260730141517.zip
- Size 3.7MB
- Sample260731-gy1kpsea25
- SHA256 b856a8d469bae6f192b89f05c09a91b89682688a99a6c2bb8381d7d7cd28aab6
Score
7/10
Malware Config
Targets
-
- Target PdFcOrE8.DlL
- Size 3.6MB
- SHA256 a81b2427fe5a5755207fd8a60d0e067cb212dac40f5f97f8854e614cf42d7e22
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target VATN0.20260730141511.EXE
- Size 3.5MB
- SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist