General
- Target 15072026_0337_photos-2026c-1106037895593.lnk.zip
- Size 644B
- Sample260715-d6jqdady4y
- SHA256 7f6fd336bcaf1c234ec7dece88d47eee9a29975359faddb87145a2c5d9541c73
- MD5 f77acea0344aba66b8cd6e9078b87e3a
- SHA1 9c26a2bba76edf0891870dd1bdc7c786a2b43145
- SHA512 0093258040a796d1d008e78fedd35a4d17bea9a54426e26a06921d1f4dba5658777a11e2b6f8986df883cbc8fecf280facbb212d72841b93d0e87e34ace35a40
- TLSH T1EFF0DDA1CE57F180EE85D13264141A0D13608F978309B9876B29380AF9C5AC4E3455E9
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photos-2026c-1106037895593.lnk
Resource
win10v2004-20260513-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
photos-2026c-1106037895593.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
300 seconds
Behavioral task
behavioral3
Sample
video-1106037895593.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target photos-2026c-1106037895593.lnk
- Size 1KB
- SHA256 36b86fc4dbfabc7de28b5e0293f378b72dbb2b5b5d25351c6ff125bc46e7079a
- MD5 d54ca1c035df6b8abf7e8f481059e800
- SHA1 aa8092ca625ac707b01daaaf521c18a6810baa35
- SHA512 cc1938c29c2116452794b4720e5f4392ed87e567d90aa8e2169ecc02b9aaf05fa6afbb7e38f51eb84286e63bebf30adc42e8f27b860ef2b4e51c78d817cc9749
- TLSH T16511C2251FEF0A00E2F65A34ECB8966129307C0C8A31065D0380182C4CE2A18DC36F32
- MD5 SHA1 SHA512 TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target video-1106037895593.mp4
- Size 914B
- SHA256 eb7be7179d6eebbd74416b4b732ebd176b744a2302bbf43a6f7d007232f74a95
- MD5 686427f2609d17176fcbaf5405435a8c
- SHA1 2395739a173a705ed4ac9b4b8d6b88b55f0cf7f5
- SHA512 81ab0e492cbad61aa09a69a956ee32fa91d695f083ec4851f4efcb83d33dbf39abfe496baa522179ff654ebe58c56b797f053d78ad204c129b9811d7c5ae43a4
- TLSH T19D1180621FE70F10E3591970D87D1ADD3135FC1C5E15510D4351491019F210CDC16F23
- MD5 SHA1 SHA512 TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops desktop.ini file(s)