General
- Target 18072026_0920_P20260711_123429.lnk.zip
- Size 621B
- Sample260718-laltvse13q
- SHA256 a66a0003cae1ff5e50326fab19b220091e20241cbdac86f147d13c1860bc8c9a
Score
8/10
Malware Config
Targets
-
- Target P20260711_123429.lnk
- Size 1KB
- SHA256 719273f73dfc92b7df89630d88b392598e7135332340039d8e0618143054eacf
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target video-784897409009.mp4
- Size 914B
- SHA256 4cde2de028fbaf7f76102a25f1eb1bea03482458b70655fc719f35a871e817f6
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops desktop.ini file(s)