General
- Target 20260729213603.zip
- Size 4.0MB
- Sample260804-pd344awtdv
- SHA256 042f3c4669ee3eacd0629c20b76fbcbfa58b2251062c6c116950b89cf9c2dd73
- MD5 a185509c1d710fb9400e706cc7c6bb23
- SHA1 8e1718f2c85a5129abeb8708b3efcd1b3448783a
- SHA512 032d97ca1d6bafc8ee98fd018b6c708df4e090fce8fdcd1c6047e219dc389e3ddf4be1f9fcd54eacd0ff77ae0773f296df385959613c60958c84c5a7134861ae
- SSDEEP 98304:Akr6XAQdNdfefeRjqK7RtwK7+a6a8D26R0N9oOg4ZT3+/V+:AkrClefesK1qg8S6CoO7ZT3iV+
- TLSH T1991633E1D9E1814EA7B5E14B80BB0D4046D6A77F450560BDDFCE03FEE2B728D8EA50A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PdFcOrE8.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
PdFcOrE8.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
VATN0.20260729212103.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
VATN0.20260729212103.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target PdFcOrE8.DlL
- Size 4.5MB
- SHA256 88d671cb94273f7ae17bc0befe1ae895e4137056148c636bf643d5cc44ed0274
- MD5 395f42087d21a556123d25367d439a1e
- SHA1 7558da2c4e1b9ec2b407b52f0a7b05914034f0ae
- SHA512 aa7d9c2bd7edb87445f035e578337eb08f8f6748244a8df119622cd698ca3c7a277fd0d66e62391729165b1ea6b3a92a8c91588fd24b82796072ac0d3bb6e472
- SSDEEP 98304:/Z74Ma7QIacnJGws44BWdvUwoew5x9JuwE63WaGc0:xibacJ2woew5frE6mM
- TLSH T11B26CF127DD14C7EE2D703344A1EF229A2EE97F42F28C40BE2C8DA2D39746526746D67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target VATN0.20260729212103.EXE
- Size 3.5MB
- SHA256 3a0583f7d3f41e1c2c36fa585ad620a518ab6661767f2e9683023745b6f58c4c
- MD5 cae7e1192eb824214833bb1e8ac092b8
- SHA1 dd2bf5cb2a7c29e4a8b7fb405ec2a9e3e9376e81
- SHA512 9fc3a12887dc3c3b82140b3ef591aad68b3407bfec3e7a292dec2417052069c14976e8fcaeea934dc81d58aca85a583979141c4463aa5924fb7c933d648b122d
- SSDEEP 98304:Yi3bpjg3E9+w1Wf/46VK2CvW+gv0AdIsf/M2Xc5ISM5:DV0w2C7qIsfU2Xc5ISM
- TLSH T198F58D20BAC08036D97216324DAA7739A6BDFE301B35A1D752543E7839307D26D396BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.