ef3a41cab8b104230f2fe5348108ed68428225a41dab3b5a82892574da58eb96

General

Target
20260811113533.4CEB7C05AACF.zip
Size 4.7MB
Sample260811-pr3eqatbjh
SHA256 ef3a41cab8b104230f2fe5348108ed68428225a41dab3b5a82892574da58eb96
MD5 79bff271f19f124fc21857e6f33812d9
SHA1 72c07cda597a4e27b6c2d1925ef722b9f26f63a0
SHA512 9b5877fec78d5b9ae4c1c2fbd6425841fda6b04e56856bf67569105252b99cdc4bb22d8eb1c174594a25318a7c35d8665de09432dd33dd88bfd4414fd6d2818b
SSDEEP 98304:h+3gVpoeRScnSPBXvoRei5D3DeIcos/DpjBgIWZC1Wy6sPkEwqRd+w/4tLf0y:Mg2BXQReiJ3KmEpjlmC1nAEwqRUww5fH
TLSH
T1C636333DFBF11783C447B1B59F6CD45A6800CD5E66829AA207D7D8A98804F7CB7A688C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  No.20260811113519.EXE
- Size 3.5MB
- SHA256 b869fbddbda07a9b4e511f533b4b7ac2a161cc88dae0519e0e55347c74db94a8
- MD5 c185dbe4fcb5da174009ada3aa4822c3
- SHA1 e8f1f825d79914fe88e9fd40983661f5ed638800
- SHA512 4fdad99da5cf6d3df2befe6505f844bafae4406f3b4e4c5777e767dd29ab0ec477e34fc73392288fd383b4a6900ecb6e8e933508c1c555a5343e1c46a4789af4
- SSDEEP 98304:7yG4M3dIc4WP1RG/w7VoTwvLIBvnR31C5Tfw/Ix6vFdO7:O4+jTxZV1C5bcIx6v/O7
- TLSH
  T173F58D20BAC08036D97216314DAA7739A6BDFE301B35A1D752543E783930BD26D396BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  pdfcoRE8.DlL
- Size 5.6MB
- SHA256 bbc90b449d5248619ef8bf6d55436cd382b3bd7dea4c18c9666da84e41c199c1
- MD5 c09172a6922a3c6e2efb0e7677a1cb98
- SHA1 fc663e69c089dd6ef5fe0e5ecbe88d7b305eef89
- SHA512 9fbad9d7bb333991f71d68d336f4f322d7d8054870fbfc9000d3198f9f17922258855e48e4a77ddb22df753df270423fd339db6b54a1c0550cac24c40219e4ff
- SSDEEP 98304:3QUYtGyUxe2iymk/QWVO56zGp6N6cjkN8Z4OiZrq1DfPHNADtV6v+S/MMGwA:gftGyL2l/hfzGp6NpjDZ4O7NADtV6v+N
- TLSH
  T12256BE163F5D1869F2AA06304F6DF2689EBEFCB01525019F1560FE68A672F814B3C53B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4