General
- Target photov_506034851982.zip
- Size 1KB
- Sample260727-lltzlszwew
- SHA256 e24533456a5a40db59af85a1d9ae2687f6ddad13d9ebc36e32952a68aa1ac1b5
- MD5 7118893f06437e44a7f1ad74e3b733f2
- SHA1 0d06d41b5cb0267d66db8ab0f2380d34a5225376
- SHA512 26f14768b43dfca26724bc84656c67e4e90fd363ff93fc512c7d7f30d93a470a936c40e52a18b83a104e66838b61a84248105bc0aabb41b956503840639fad05
- TLSH T10621B494860BEEC0C873C33908B9C19A563427A9731003EB2E1DA5B21E49F82EE1B211
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photov_506034851982.lnk
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
photov_506034851982.lnk
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
videoa_280918246554.lnk
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target photov_506034851982.lnk
- Size 1KB
- SHA256 632164ee918ffb4ba5d74dd6c54015a4cd7cc47621ca70ae646e3f330bf487a3
- MD5 7715f721c80eaf2e0ba54a8f8759a8d1
- SHA1 6550ff8ec25ecc960b5f4a1e327ca96440f6cdde
- SHA512 c22ba8d267e4c84e4c8e3c0a9a0c795ce977486b614fddb5a02f974b0754cf3058ed3005fc8f7a5b8eeda4083e9a84327c427c66c06262f0a17c2c7158b5f965
- TLSH T1E631CE64ABD50632F9F9CD32ECFEA0077C66B72B5D26A80D00D5010C84B2D44A9E362D
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_280918246554.mp4
- Size 1KB
- SHA256 e806aa1644e2f020c88a56da2168bdc6d73e6efb0c31d8471b0b21f7207bfb96
- MD5 d6ed2e9d765302aae5c718c84d8d8ec5
- SHA1 1b0022f25275b35b7beb2adcaecdc17dff7946c2
- SHA512 ce700daad66742b98cde2473a8ed38bfdcf775346bb445f028d75f3059ae38facc85cea780225bae61776602364770a783af94f55b7c57db7e4f0423115bcb23
- TLSH T16C21F1F01BD70901D612C770BC3DBB0CB47E7344AE5152BED186D46686310448604EA3
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)