60cc6e447278d4645f933e5b28976de53e61ded4324d4304f46e7dcd948e1f79

General

Target
20260730114452.zip
Size 4.0MB
Sample260731-pla4aafr2t
SHA256 60cc6e447278d4645f933e5b28976de53e61ded4324d4304f46e7dcd948e1f79
MD5 135a08c378edf718008332875aed1380
SHA1 3b366952c5ef97f5f6ae1bfe2c395a6ceb6dcc61
SHA512 38d18590e8ba9fd87922b4d887d492c3f97e28c10e748fa0484c8f4c14c5d88f27e3871e1c28e75a66c61acb7e2bc0eb21b6517cb7dc9639f690786e8d683fc5
SSDEEP 98304:wAGVWHr8D1P8X9uAySplb7RtwK7+a6a8D26R0N9oOg4ZT3+/VK:wAGkHr8xPkNZlb1qg8S6CoO7ZT3iVK
TLSH
T1D41633C2E8D8C5A6BEB0D24AE1219E4C54BEC7BA494170AE1FDD036DE2F460CDCD29D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  PdFcOrE8.DlL
- Size 4.5MB
- SHA256 4a9b91ff63f356fdf66b091cb5b2353990674612e4a4d20d1dfef7aef4d78dfc
- MD5 90a3ec33a7012d88659033c92a8c65d5
- SHA1 425fc24fe2d71e3e26d580b02783f7b52f52db87
- SHA512 0dbfaf54d5bf17012720b5d65370608b971d35acf5bf08eccc12ac26399832dfc45516b8ee47a832523d2747dde82d410bc65a8cbb7409d60a87ef3032de946f
- SSDEEP 98304:/Z74Ma7QIacnJGws44BWdvUwoew5xsJuwE63WaGc0:xibacJ2woew5arE6mM
- TLSH
  T15D26CF127DD14C7EE2D703344A1EF229A2EE97F42F28C40BE2C8DA2D39746526746D67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  VATN0.20260730105012.EXE
- Size 3.5MB
- SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
- MD5 cae7e1192eb824214833bb1e8ac092b8
- SHA1 dd2bf5cb2a7c29e4a8b7fb405ec2a9e3e9376e81
- SHA512 9fc3a12887dc3c3b82140b3ef591aad68b3407bfec3e7a292dec2417052069c14976e8fcaeea934dc81d58aca85a583979141c4463aa5924fb7c933d648b122d
- SSDEEP 98304:Yi3bpjg3E9+w1Wf/46VK2CvW+gv0AdIsf/M2Xc5ISM5:DV0w2C7qIsfU2Xc5ISM
- TLSH
  T198F58D20BAC08036D97216324DAA7739A6BDFE301B35A1D752543E7839307D26D396BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral3 behavioral4