General
- Target 20260804142311.ACC94F70494B.zip
- Size 4.0MB
- Sample260804-pdlvtazcja
- SHA256 e8409b4f985f9a499e478fe6e7d2cdd2d41346ce34aaf2c79fe8c8181d69de8d
- MD5 00bc0ec2e56a78ccf01523decc2d4a14
- SHA1 065a9ce2ef23e7930e74f57aaa3de0b8ba8e5bd4
- SHA512 e4792d98c188ea57b3a9eaeb94987c2b6fc35aab60ac7d3135b08820d0fd6246c51d8b577335b7bf41819b132cdba18e451e8827131a064af316a8bd8ec87e04
- SSDEEP 98304:1XZAT2gMRmoEtIu17eV0+J+0nCCKM5nas4BQ9FzM/POVUWgn4w:be2gMRmZ7edEQ74ByI/Kgnp
- TLSH T138163353CD4DA54E260A3358AF7FF8294FC93023D47D3A1CA5EDA18B3ED865284E81E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PdfcOrE8.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
PdfcOrE8.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Vat.N0.20260804142245.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral4
Sample
Vat.N0.20260804142245.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target PdfcOrE8.dLL
- Size 3.8MB
- SHA256 3807ef43f7cbed1b210b64ddf532f9646482d4f4366b060a692c8598ab01e3aa
- MD5 828d56db8d6ecb84f456a588a0d46852
- SHA1 1961fb46cb27c5012669d997e736d100627f4ece
- SHA512 86df535dbabdff8a8c7113c92c6beb1e81ce4456832a69c31d48d2df860980b8eb9b40a99361cfced028c433fd33d3f3797c4e53b91d713696e9096fdd9f2388
- SSDEEP 98304:UxXIrHdD52XJXi6zfBboqhpkLxnArdxOrxSLgkfjsSzPyiAbA:UxW9D5+XroqhpYxnArDMxLkfIsEs
- TLSH T12D06D0013541C07BD5EF1E305A39BAB9F2BDFA7006F500CF36D4A799297289385267AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
- Target Vat.N0.20260804142245.EXE
- Size 3.5MB
- SHA256 b869fbddbda07a9b4e511f533b4b7ac2a161cc88dae0519e0e55347c74db94a8
- MD5 c185dbe4fcb5da174009ada3aa4822c3
- SHA1 e8f1f825d79914fe88e9fd40983661f5ed638800
- SHA512 4fdad99da5cf6d3df2befe6505f844bafae4406f3b4e4c5777e767dd29ab0ec477e34fc73392288fd383b4a6900ecb6e8e933508c1c555a5343e1c46a4789af4
- SSDEEP 98304:7yG4M3dIc4WP1RG/w7VoTwvLIBvnR31C5Tfw/Ix6vFdO7:O4+jTxZV1C5bcIx6v/O7
- TLSH T173F58D20BAC08036D97216314DAA7739A6BDFE301B35A1D752543E783930BD26D396BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.