General
- Target 20260804033254.6CAA43FF01F2.zip
- Size 4.0MB
- Sample260804-aj1tlasvhz
- SHA256 3d53bd1007b12be7fd95081037d1a63b0091cc05da819ecb3a1cf352089dd4f4
- MD5 dcc2b4293c765753583cd8627f6b7cd2
- SHA1 e5471153f13f24b424ef3e48681967888dce86a7
- SHA512 477f59cd1b731a1ef1772a1da3fc0289dced1e1204977996af2f5568940f474f87bd19a558bf12c15025c87687c5ffb5f75249f1ab1746a13e38640634287ec2
- SSDEEP 98304:NUSCGSar2oewYL2OZJ3k2uuy8ct2BsNpQ2j+Q:yw7r29cY02uuy8ct2BP2jf
- TLSH T137163397FC1748E2C16DB3262727F8823D8EDC818706C9F67795709F96D5AC38B2A019
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PdfcOrE8.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
PdfcOrE8.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Vat.N0.20260804033212.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
Vat.N0.20260804033212.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target PdfcOrE8.dLL
- Size 3.8MB
- SHA256 7affa3ee1efbc696dcab2261fdd0fdd7348f02a4916c19b1ca0f0ac8c28cb65d
- MD5 26607868b746445575ef22695788eccc
- SHA1 f7b42f21f126caa597aa1b16a8134aa2fd18bec6
- SHA512 42fc530d579a32f5fefd730a053ea4c95cf074f25a7cb9544696b721cd6939f303b78c5a2c5eaf53169b27ccd9bcad3e6f85e7715e709362bca3c832c3a1114c
- SSDEEP 98304:UxXIrHdD52XJXi6zfBboqhpkLxFArdxOrxSLgkfjsSzPyiAbA:UxW9D5+XroqhpYxFArDMxLkfIsEs
- TLSH T19D06D0013541C07BD5EF1E305A39BAB9F2BDFA7006F500CF36D4A799297289385267AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
- Target Vat.N0.20260804033212.EXE
- Size 3.5MB
- SHA256 b869fbddbda07a9b4e511f533b4b7ac2a161cc88dae0519e0e55347c74db94a8
- MD5 c185dbe4fcb5da174009ada3aa4822c3
- SHA1 e8f1f825d79914fe88e9fd40983661f5ed638800
- SHA512 4fdad99da5cf6d3df2befe6505f844bafae4406f3b4e4c5777e767dd29ab0ec477e34fc73392288fd383b4a6900ecb6e8e933508c1c555a5343e1c46a4789af4
- SSDEEP 98304:7yG4M3dIc4WP1RG/w7VoTwvLIBvnR31C5Tfw/Ix6vFdO7:O4+jTxZV1C5bcIx6v/O7
- TLSH T173F58D20BAC08036D97216314DAA7739A6BDFE301B35A1D752543E783930BD26D396BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.