General
- Target photov_730128136941.zip
- Size 1KB
- Sample260727-pene2aek41
- SHA256 e5dd21abba2a089bd45e53658361327d9336166502d8ec73708865901c3a6082
- MD5 6cbe7574d048dafac5ebaef14646ac3a
- SHA1 fd4eccec2700a463af634e08d893eef1c3686668
- SHA512 56a25b8716006bd5ee281eaecef73ef31f2414b860b8f819e22b37934e777c5879bb59131b242c7569ec326c005970df419820b5f441db33c5131e0627c09591
- TLSH T1B221E929C08A9531C98B0BB2BA57FF0F28D1D3444A03306B53B11ACE6C02ED88723238
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photov_730128136941.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
photov_730128136941.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
videoa_295449019677.lnk
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target photov_730128136941.lnk
- Size 1KB
- SHA256 89bdcd7b09a5d26489cd5b803096755c6f2d64fc416f29388ef7813a1551e86a
- MD5 c6c8f3e3519d30921416c1f44f2aaff1
- SHA1 ad344b7b10577d3e072d25b195a92cbe6abf29ee
- SHA512 f143df12d33b3258bd20cc197974d554377504e410e1f7a09cdcf256135670040b1f93dabdcd430c66b3a5ae5cf0534f4dc0fdde609a29daed1d3940fb805922
- TLSH T15C3180689F970426F9F6573AC4FEB2477431E52A6112EC49009D431E94F3548D043EAE
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_295449019677.mp4
- Size 1KB
- SHA256 ba6d704efc7df268212f88bb42b3280db9803d5cc9bdef9297a5c1b7a5c4a907
- MD5 08b11eac9b064c50d0e0bc5900d903df
- SHA1 7b0e569c66f249650ea76dfdd4fd32b7d2a5166c
- SHA512 8a7d5919538ac854b33ac7e0c2501dc44720e675be7442e09fcd64257eec833344e838cdf1d667f388fb2d592beb8d5a6930f173581456a26a42979fc587c4f8
- TLSH T1741168C53BC34AB4D2064A71BC7E478F36E630207C254538A14AEC1765F19809189A23
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)