General
- Target images_20260725_022922.zip
- Size 14KB
- Sample260725-m7le2awsbt
- SHA256 87fa3911f7c6ba14faadefd5cc1a0ec29c176fc3858a1addd391bc4099860e6f
- MD5 587701b1047b53c2b0a8976e0dbaaba6
- SHA1 f2fd127b76f49c88a4ac5a6a27434567f45002f0
- SHA512 9edc2045a99ceef2d25f9ae53c8d4c85b0f87702fe8a56ad161a125cb32013307c9836a8ac844d8068672d88285f9ee70c145b172c81115a86248af57fd6fa32
- SSDEEP 384:+HmNqQDWqI3lydYBaFYRci4yKtq1t78OEcGLdreGNPmGXX:+HmNqb1ydYBaF5ifIzcGLdrPmGXX
- TLSH T1D062CF2A42171ED2FFEBF8F594BB2D526182F550C15807A8EC6E2C494F11841B9633DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260724_141910.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260724_141910.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260724_141910.jpg.lnk
- Size 1KB
- SHA256 c1ad57529fc18ebb05fcffd5b49d453133a8f67e4b6e848065bf6ae9727abac5
- MD5 0714fd6e20a6f2f9b60c08e014896198
- SHA1 9ba2701a532b67633300151f96efb921bae242c3
- SHA512 ec343750709d526e94851192c12eb4503b76e29c8da134e1773707f04e695525539561dec018404a5ad3472148ec9ff461438429693af5729bf51d7fb4869446
- TLSH T10D21E1211BF30329DABB8B39587663118732BA0ADF55CF9F138042949964120F4A8F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.