General
-
Target
d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194.lnk
-
Size
2KB
-
Sample
240229-gm2nmagd3s
-
MD5
7aedf8f8a11a97880b16544588f15683
-
SHA1
a31781401cc7dac39e62d4812c17cf96f889d350
-
SHA256
d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194
-
SHA512
db9be41e532757c4e5cb0cc1a8630000718aeb50bce2c4fa937861f445d4e9f35478e64b78fd273c09ae6fe45e8e4c6a3c5f3600e1948cca23137b90f5ecf14c
Static task
static1
Behavioral task
behavioral1
Sample
d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194.lnk
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194.lnk
Resource
win10v2004-20240226-en
Malware Config
Extracted
https://thanhancompany.com/grip/FYI
Extracted
https://thanhancompany.com/grip/FYI
Targets
-
-
Target
d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194.lnk
-
Size
2KB
-
MD5
7aedf8f8a11a97880b16544588f15683
-
SHA1
a31781401cc7dac39e62d4812c17cf96f889d350
-
SHA256
d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194
-
SHA512
db9be41e532757c4e5cb0cc1a8630000718aeb50bce2c4fa937861f445d4e9f35478e64b78fd273c09ae6fe45e8e4c6a3c5f3600e1948cca23137b90f5ecf14c
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-