General
- Target photo.lnk
- Size 1KB
- Sample260705-wspzcaex5z
- SHA256 7694bcbf6f5835f618a0e7f23c282b9f98fe5bf1526a2cf006696d95531869d3
- MD5 b0dd30fe85a56bbf1ca06ef1bcd0cf03
- SHA1 7f070cdd93994de4f216afc243ac2d0ea638528c
- SHA512 a75d1091ecb2d3f69f7cacbb359e120a85fe2840c64db5728701c365145881ac6871730a5ee1d9937e451c075bc089f0700ac25fc7c18feafb1e5e97d127f622
- TLSH T10141EF009FE74B3EEB264238AC76A381933BB5A2F4965F8DA040478808B3001956CF7F
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photo.lnk
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target photo.lnk
- Size 1KB
- SHA256 7694bcbf6f5835f618a0e7f23c282b9f98fe5bf1526a2cf006696d95531869d3
- MD5 b0dd30fe85a56bbf1ca06ef1bcd0cf03
- SHA1 7f070cdd93994de4f216afc243ac2d0ea638528c
- SHA512 a75d1091ecb2d3f69f7cacbb359e120a85fe2840c64db5728701c365145881ac6871730a5ee1d9937e451c075bc089f0700ac25fc7c18feafb1e5e97d127f622
- TLSH T10141EF009FE74B3EEB264238AC76A381933BB5A2F4965F8DA040478808B3001956CF7F
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)