General
- Target 2st.zip
- Size 588KB
- Sample260720-hnnzlabz61
- SHA256 76f6cb5d51f0c2043e5f38cda049c4fc5dfae01ccb6016e5f3f06c51715bf92e
- MD5 7c14c247d9b6ecfbdd7810b96ddd8a9e
- SHA1 a0c7fb4f393b13b6323fc2260f42ff65d62654f0
- SHA512 a2d92b5f055ff349ecd4d45653e1a96f8e1b9ca63e27c7ce984ce8fd53bc9808bfd97c313c3ff3622e02a0c1ae7fe21ee1eec560397b88ac06a896258be28788
- SSDEEP 12288:4CSyf7LZsVBoDqiPX28+m3jb6B8ULd/8YJF7wDms0VXz2Rqo:BpjLZsVz8d3/6B/dU67waszd
- TLSH T116D42342C070DBAEF588CB68F0DE75D42784B821665EA9440E2F6A9F54AB3724F7CF50
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
4b795cf2352971f470db2e451ae62dc8c859ed7c4148be48c66a723062fed7a8.lnk
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
4b795cf2352971f470db2e451ae62dc8c859ed7c4148be48c66a723062fed7a8.lnk
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 4b795cf2352971f470db2e451ae62dc8c859ed7c4148be48c66a723062fed7a8.lnk
- Size 593KB
- SHA256 4b795cf2352971f470db2e451ae62dc8c859ed7c4148be48c66a723062fed7a8
- MD5 d04be225aae86085a44a387a1c63a0ff
- SHA1 d9dfaa6f84abf04e763fbc9f5f5b7e16860a8897
- SHA512 f966514568676442308dee64d866c4699dd5b09e45319e0961735eea67fdf8acf59227e2269ce882ca5579aebd37d6bca33cbcfeebe9558560ce9d174b05283b
- SSDEEP 12288:B6Me+wPUHwzdoXQgawwFP14yTqXlfQMtl35j12s3zqvRTo:BbPrQzdoTawi+XlIMtl35Ms3U8
- TLSH T12AD4234984F6D359FA7384BA90B3EB9584F9F8D328407993502C1491F050DF6E2BBBB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
System Binary Proxy Execution: Odbcconf
Abuse Odbcconf to proxy execution of malicious code.