General
- Target images_20260724_192322.zip
- Size 14KB
- Sample260725-m7kthawsaz
- SHA256 45d1b8d7638e376ec1b3e98f1c17fdc793430dee5369a1a71272efef4f1ccc11
- MD5 2f1f5fda5ff1a09c42553a712ad9103d
- SHA1 e603be6ca807ca585fc12f8139790a84a86adbc8
- SHA512 a6815b25897894c88f97bad0daa7fbda66a934b1680976d4785e8f3be6a88e7cb7e8b62928a5b1408fd072dafe711b324090f4a6dd79f8f2a10910654be569f7
- SSDEEP 384:fAqnevS+xnBGw94F0X9vyr9FnfnIXkD/jvpniwmI:YqeZS6fX1unfnI0D/jvTmI
- TLSH T16262D04693A2407BA43FAE7F34C27F2E7732438F06852EAFA0055E9654759B9301B53E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260724_180644.jpg.lnk
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260724_180644.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260724_180644.jpg.lnk
- Size 1KB
- SHA256 43094d33e67c03ae3b293046e25f4c28334e2c0d70be220b46c5f5398e84a513
- MD5 7dfa1ca7474c41854132461eda082d57
- SHA1 ee965cee2de00749999e2878440f2602205a840c
- SHA512 b76f9387bd8b5d9bd05de54c0e40e6731c33131bf4eac8b6d425d8067075820d0946cb96a6085ab6c979c8b210e4adbe3945b26c3ebd8199f78f6066b81090d6
- TLSH T13821CE211BB20379D6BB8B7558B6631187227A0ADB55CF9F129041949964220F478F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.