General
- Target 16072026_0252_IMG_20260722_195253_472.lnk.zip
- Size 637B
- Sample260716-dc3ldsfs4y
- SHA256 7f293125197fd3fd25eb74ae27da564a32dc2b8b0ac4ec9d522a630c528f35a9
Score
8/10
Malware Config
Targets
-
- Target IMG_20260722_195253_472.lnk
- Size 1KB
- SHA256 4e81d94aa44752c3077a3f5039159f47797a3ffaa1def4d6147b657b79e0534c
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target video-8146467233792.mp4
- Size 914B
- SHA256 15d07d19b4667183ef99cb0accbc379733e8cab7a97975218c0a195c2cac3997
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)