General
- Target M_X20260806080501.zip
- Size 4.8MB
- Sample260806-ftgrcstdpg
- SHA256 a7f8757c780afc2fcb081f861b3be24b0be5badd3042f759e8af4fd47380dca2
Score
7/10
Malware Config
Targets
-
- Target Vat_N0.20260806080456.EXE
- Size 3.3MB
- SHA256 21cf7a17569852a7a4c93ea9faf1478b0a08b9695acf56f10d597e86cac8aed9
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target pdfCORE8.dlL
- Size 5.2MB
- SHA256 8136a9b1252e0d8c293c6c99444b371f3f7dc9fccbf351597a0aec029fe92a96
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.