Overview

overview

8

Static

static

1

Item.png.lnk

windows7-x64

3

Item.png.lnk

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Item.png.lnk

  • Size

    3KB

  • Sample

    230411-mky3lsde8y

  • MD5

    ae025d55a14f799eb1e6ded2f987ff45

  • SHA1

    b0d3064b828e724d08bc742e0ec3e15b727950b8

  • SHA256

    843eb2ca1e64034f3d181ae788b37c41fff31c04060a7d8f7beb81d6bde2f6d4

  • SHA512

    dbd55a3b8b311567e00d20d61658a0623f896290c69f598be53d63c1d8559b5093201519c126b90f344fb4d4f0487b9180e67decefd4a178a119e6e93b5e7c25

Score
8/10

Malware Config

Targets

    • Target

      Item.png.lnk

    • Size

      3KB

    • MD5

      ae025d55a14f799eb1e6ded2f987ff45

    • SHA1

      b0d3064b828e724d08bc742e0ec3e15b727950b8

    • SHA256

      843eb2ca1e64034f3d181ae788b37c41fff31c04060a7d8f7beb81d6bde2f6d4

    • SHA512

      dbd55a3b8b311567e00d20d61658a0623f896290c69f598be53d63c1d8559b5093201519c126b90f344fb4d4f0487b9180e67decefd4a178a119e6e93b5e7c25

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks