General
- Target images_20260725_041958.zip
- Size 13KB
- Sample260725-m7mcbswsb1
- SHA256 d2fe8c1b6e848bed7fa919fc7a3fa9ad2fbe7aa77b8066f523e99752f794306b
- MD5 1f4ee8c608e7fc470461d6842a4cdceb
- SHA1 66b89218a2bafcc4401d252e5d20c793f1c0a773
- SHA512 e9cce1829e6de35fb483435f5d0c377452f0c4d48725147a75a4a7731ab61dba63578bd7b6ca8a5593a6b0041f84206222f84bdc5db441f705d8a48cddd6017e
- SSDEEP 384:HqnW1xJu3J5xbh8psqyVevQMOl2DMTnNV+kM5:eW3UfxbGpgl2YTnf+kM5
- TLSH T1FF52D0D3981329FAC677413931778059E2ADF1717F88655E84F2913C503B4A330EE765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260725_055818.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260725_055818.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260725_055818.jpg.lnk
- Size 1KB
- SHA256 88918b36c6bbaf95ecd7bd945c0987efbca900e1a2de40ef19d5c1f7143ba30b
- MD5 3ebb949183662eb2af8ea8ae2b81add1
- SHA1 7b38798106ac91fd0d84818e3c399d105a50931e
- SHA512 6856c3e53eca455fb8456861038cb54a8e1709558b4b91de1cf7e3ba9a8d74bdf9abfa7f2a8d6f071bff49ff3d49b35094f7087623cc417e62b616aba34ccf30
- TLSH T1F631D2295BF21368C6BB8B3558B6631186217A0EEA499FDF13C0C2949864110F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.