General
- Target 260803_PDFCore8.dll.zip
- Size 2.6MB
- Sample260803-lty9asff28
- SHA256 9e9335fb5d27a8e276f305d4805377e76a8df62250cf92317b9380c51cef3055
- MD5 0fd3a3b4aac597b4044c97fe9b876f31
- SHA1 33f3daf3060a44c981c4940dd2b53f91ed8f7d13
- SHA512 0146f6495b4424776faaa6e9cd88f90e7ed1db5363e02caf3e5312df19d7f204e391f0c63961033b5d9475a6f1582a9bfcb348baa775dee3d1cb7dcc0eaf74af
- SSDEEP 49152:iX6srY7k1hxa39GWIQkIgPFk2BXRg0E8x11Ox+ReVcRrhYawQtAb3eVOk26bB:iKsrYWhxWGWItBBhtE8x1MohrmawQKrc
- TLSH T128C533B14269F45DDE3F55B93EA341D7B881C1240C979DC197D2DB3AC78BC30902ABA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PDFCore8.dll
Resource
win10v2004-20260513-ja
11 signatures
600 seconds
Behavioral task
behavioral2
Sample
PDFCore8.dll
Resource
win11ltsc2024-20260709-ja
10 signatures
600 seconds
Malware Config
Targets
-
- Target PDFCore8.dll
- Size 3.9MB
- SHA256 bc65acbf7e21d8f83af870976c0394546335d9c2fcc1bfcda59b4bfa0073b764
- MD5 7649f3b36cb9f961b5b08c4abe6ea3c3
- SHA1 d8174ab0ce1db8e154680391152a5f4fc7f688f8
- SHA512 3a01fb6dd7327852b6d76f408d7a80c47f18d8b20ed38d7e499b442bf9c186756a58bcd867d29cc5ad256f4327835b6d9ecdbb7ed08ec9ba1ea7ec4c60503912
- SSDEEP 98304:b2xliJQ4DUrfgJuVUwpZfUCcabgWShASbyAdEOzutKVlnfSzPyi7:b2xIQTBQabgWShnbyAdzzvVlnfs/
- TLSH T18816D0123D8042E7E42A1370564EB7BDF2BDB7B80BE784C7E6D0E64829724867126D97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.