General
- Target PHOTO-843636838.png.lnk
- Size 1KB
- Sample260604-lff6kacy7p
- SHA256 15687f244ebd8aa9e251f73bfed99182c0ae600bf37de71d294cc7550205dea7
- MD5 3d28a84429b1175ed88dc6cce8650a3c
- SHA1 d0fd605b18d8af766fb7beb94f3ef7397db4aa8a
- SHA512 e721668127233fb76927292c31939444eed0704baaaf5c44ee8dfe455d3f14001efdcf90ac90b953ad16568ba3b8ad422cb3e0ae22b631aa0c2dff977f911345
- TLSH T1AB41CE041BB20239FAF7DF39D8BE6212AA627906EE659F4E1194435C85B1110E877F3E
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
PHOTO-843636838.png.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
PHOTO-843636838.png.lnk
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target PHOTO-843636838.png.lnk
- Size 1KB
- SHA256 15687f244ebd8aa9e251f73bfed99182c0ae600bf37de71d294cc7550205dea7
- MD5 3d28a84429b1175ed88dc6cce8650a3c
- SHA1 d0fd605b18d8af766fb7beb94f3ef7397db4aa8a
- SHA512 e721668127233fb76927292c31939444eed0704baaaf5c44ee8dfe455d3f14001efdcf90ac90b953ad16568ba3b8ad422cb3e0ae22b631aa0c2dff977f911345
- TLSH T1AB41CE041BB20239FAF7DF39D8BE6212AA627906EE659F4E1194435C85B1110E877F3E
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.