General
- Target 16072026_0253_DSC_20260713_103752.lnk.zip
- Size 633B
- Sample260716-ddjvnsby2l
- SHA256 613be7cfb4917b292678d5bccd4551b10d7bd210b5b6fab0a4d1a5dd537c0fc6
Score
8/10
Malware Config
Targets
-
- Target DSC_20260713_103752.lnk
- Size 1KB
- SHA256 81254cfb6f4eee19aed87a2a5d526654455e911cee51665739d572f698dc97f5
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target video-08709197645434.mp4
- Size 914B
- SHA256 655a705b0922ba96309313e077cfd8318d5d08e3c1f8049875decb8483b827f7
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops desktop.ini file(s)