General
- Target 20260811113526.13D9EF7DBCBC.zip
- Size 4.7MB
- Sample260811-w67fjsyfkf
- SHA256 52f3736ca57fd547f8360ad3f07b9e7ce5f62adbbc95b1d7df95b547d648b097
- MD5 34b5b844fd8b2cddc2cb35c3bb7d6384
- SHA1 f3106c6aaa8f1f766384e2fa2f10fa588719e3a1
- SHA512 5029a758c1a23fde5a6e31e0af134b7707b68d3122548118cee60d029c934c55f01a3eb2b06305f0390a242c2e32a92c5401cfbcca3e3449a03b541d85d92272
- SSDEEP 98304:I6jSYlwFhg3I2vvhARcfY7U2LWV7qLQlr4e+Iy9GDd7jw6:K7bcJvhN4Uk/mj+VGDdvL
- TLSH T18836335680C8E713EE316272E24F6C949EDD29A89E14CFD911F8EED8F893B4055EC187
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
No.20260811113519.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
No.20260811113519.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
pdfcoRE8.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
pdfcoRE8.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target No.20260811113519.EXE
- Size 3.5MB
- SHA256 b869fbddbda07a9b4e511f533b4b7ac2a161cc88dae0519e0e55347c74db94a8
- MD5 c185dbe4fcb5da174009ada3aa4822c3
- SHA1 e8f1f825d79914fe88e9fd40983661f5ed638800
- SHA512 4fdad99da5cf6d3df2befe6505f844bafae4406f3b4e4c5777e767dd29ab0ec477e34fc73392288fd383b4a6900ecb6e8e933508c1c555a5343e1c46a4789af4
- SSDEEP 98304:7yG4M3dIc4WP1RG/w7VoTwvLIBvnR31C5Tfw/Ix6vFdO7:O4+jTxZV1C5bcIx6v/O7
- TLSH T173F58D20BAC08036D97216314DAA7739A6BDFE301B35A1D752543E783930BD26D396BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target pdfcoRE8.DlL
- Size 5.6MB
- SHA256 854708d8856210aa230479ebf70d77bae9ba9fa63404c1d3de1081c8fdb89220
- MD5 4f93d1e6d331ed61dd056753dd94f8e9
- SHA1 be5c07af4f92bdfcea15860db051b23cf5448e31
- SHA512 6ea52cb90794cced36eab34a1fb784e456a643f9c079eee1f98691a4aea61f935d536413b2ef5513b8b7cb029e4d79b403c12c212c076cb02e3a91bd9fc4d29b
- SSDEEP 98304:3QUYtGyUxe2iymk/QWVO56zGp6NbcjkN8Z4OiZrq1DfPHNADtV6v+S/MMGwA:gftGyL2l/hfzGp6NwjDZ4O7NADtV6v+N
- TLSH T11E56BE163F5D1869F2AA06304F6DF2689EBEFCB01525019F1560FE68A672F814B3C53B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10