General
- Target images_20260724_145112.zip
- Size 16KB
- Sample260725-m7kthawsa1
- SHA256 dfada820a845dafadec60311eb8914d712f08d8fcf18074aa1d4764285207db0
- MD5 6b3825494cebd2298a760d8794c9b3d5
- SHA1 8f5107f1ee03835953a8ec0e0ad2b2e35e3ca4ef
- SHA512 850f3730b0240cbf6c8c18eec0d355e76a805de5199f24b3671a5609f5358110dc71787b828025516c4f269ab6a4e8e674f8e21cbd11c7797a47a584b3069e81
- SSDEEP 384:vy/bJNg5Q/n41tFRPpJNJ3I6Cz5GNFm0b5FcQMoSWQ:vyk5Q/n41tPPLNJ3FwgFLM
- TLSH T13672D10E916BA71FDBE226F4FFFE96D81304D336C80069D5867C04DADE13226E89590A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260724_140531.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260724_140531.jpg.lnk
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260724_140531.jpg.lnk
- Size 1KB
- SHA256 7678132926512fca284f22d437e8b8432caed46f5b3a33936d9a3eed88e2073b
- MD5 281a65f8c7d8cb1783425e470dad9a7f
- SHA1 57a1db4bdf6a668cd87f32a4098dfe8853cacc38
- SHA512 2d953f8e3436498fda8115d980cdc28dfd8e0e995d1751e91fb99fd1aabe43d88d183fe3b5bf64431779708648b4f846c70ead4a95e23a379e4c52cf3e82c194
- TLSH T13121C1211BF21328DABB8B355875631187327A0ADB458F9F028081949965111F4A8F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.