General
- Target 15072026_0341_photos-2026c-1288400709.lnk.zip
- Size 634B
- Sample260715-d8v67ady6s
- SHA256 42236dbaeadf82f7f192fca0b755c7ed87cf57b670ccd770f8f2fb423c2631f1
Score
8/10
Malware Config
Targets
-
- Target photos-2026c-1288400709.lnk
- Size 1KB
- SHA256 dddf933f5d3b89fe91b4b330cf0ddb1189d27db3faf9155636ae4b0d95de1369
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target video-1288400709.mp4
- Size 914B
- SHA256 f7f482707a2e2f41bc405d757680ee65078a88a0df31085dfc890dbba8accfb5
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)