Overview

overview

8

Static

static

1

photos-202...45.lnk

windows10-2004-x64

8

photos-202...45.lnk

windows11-ltsc_2024-x64

8

video-2896...45.lnk

windows10-2004-x64

7

video-2896...45.lnk

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    11072026_1620_photos-2026c-2896710717445.lnk.zip
  • Size 654B
  • Sample260711-ts2l2aez2p
  • SHA256 79c1599b62122dfdf19ef21e351924cea66c99546dee5e47a44aa078b0ea82e7
  • MD5 SHA1 SHA512 TLSH
Score
8/10
adwareexecutionspyware

Malware Config

Targets

    • Target
      photos-2026c-2896710717445.lnk
    • Size 1KB
    • SHA256 3e443df10080a54b38b0717f3ed4bdde748e2487783f6b8c7b320c9a5da39de2
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2
    • Target
      video-2896710717445.mp4
    • Size 914B
    • SHA256 35861e5e8b48f420dbaa8b2e910685e93fd6ba637d16be158f248f1f6f8fdab9
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    adwarespyware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops desktop.ini file(s)

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks