General
- Target images_20260725_015858.zip
- Size 16KB
- Sample260725-m8ph3swdld
- SHA256 ba299e94793e7ee8e82237e3e00f693d2dce0a47feae484a1201367ca3f41807
- MD5 9f2beef418976bac3b07c7bcfaec6750
- SHA1 7ddb9b735118633dd93519be7a33d5636b025d96
- SHA512 e665b17c1d984ee0d83cade6ef554b5451af61d47d67362e7f91edc32032a7fa6c9f8a974eba8de728ca1eb742e5a6020702d140c439dd4c82fc45fcbedb3807
- SSDEEP 384:gVCywhbDQgKjHnj/02pmmE+ozdrpfY3J/Izd6L9jQzi:cwhbc5HjsamF+CxYFIIJB
- TLSH T19272D140E23E03C18A66017FDCDFBBDAE64465A869142FD78CF953CE6FB1D6A012A251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260724_204752.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260724_204752.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260724_204752.jpg.lnk
- Size 1KB
- SHA256 950aebe7fd8c4c9c32f0a69dc5c2f974d4e89a9127e7624f196c11e6c1bed061
- MD5 1005b235ef2f9ae1a634e6153901a4c0
- SHA1 85a36977c8d22a630fc147e95246453a0cb890e2
- SHA512 447aba127d1a568d5a680cc780fd198e859cc40496924334088c33ae779dc69ef6ae8318b20c57b450edb5495f9fb8b7613dfcb2ed711f08730e2f2c21d1b0ac
- TLSH T18231D2299FF21339D6B78B355876631187217B0EEA498FDF1280C2949864121FC78F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.