General
-
Target
e900f16dc064f78f6d81fda1dc52a17116d4bb578e6ef528e2f04b3e46b434a3.lnk
-
Size
2KB
-
Sample
240425-ckjyksdf2x
-
MD5
82fde340f187a517e0feced1d4972363
-
SHA1
07740ba4e30a1dbc830451a0d05130ba1af28be9
-
SHA256
e900f16dc064f78f6d81fda1dc52a17116d4bb578e6ef528e2f04b3e46b434a3
-
SHA512
db1630813f3a6e19b9c1bfb6dbaecd3829592230635721df5e2121217bbe2ea2a7594eae7061d5d2ce2baf4bfad5687ce22fa58dba94e8e30b0d7630e872f79c
Static task
static1
Behavioral task
behavioral1
Sample
e900f16dc064f78f6d81fda1dc52a17116d4bb578e6ef528e2f04b3e46b434a3.lnk
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e900f16dc064f78f6d81fda1dc52a17116d4bb578e6ef528e2f04b3e46b434a3.lnk
Resource
win10v2004-20240412-en
Malware Config
Extracted
https://www.sessosesso.it/assets/aw/yt.hta
Extracted
https://www.sessosesso.it/assets/aw/yt.hta
Targets
-
-
Target
e900f16dc064f78f6d81fda1dc52a17116d4bb578e6ef528e2f04b3e46b434a3.lnk
-
Size
2KB
-
MD5
82fde340f187a517e0feced1d4972363
-
SHA1
07740ba4e30a1dbc830451a0d05130ba1af28be9
-
SHA256
e900f16dc064f78f6d81fda1dc52a17116d4bb578e6ef528e2f04b3e46b434a3
-
SHA512
db1630813f3a6e19b9c1bfb6dbaecd3829592230635721df5e2121217bbe2ea2a7594eae7061d5d2ce2baf4bfad5687ce22fa58dba94e8e30b0d7630e872f79c
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-