General
- Target photov_857348197437.zip
- Size 1KB
- Sample260727-pf8scsssgw
- SHA256 e32bb62ce5a4cab7f3451e238e33d5cce8f260925cb835814f2e61bcf5a8483f
- MD5 f46e0f22fe356bde4c7af2d32da1e493
- SHA1 951b0d6655e2207c52a0675aaa82ec9f9fca7e7a
- SHA512 6d0469db803dad05d5fad532d1b8df1315faf24c69408d1ae720c6c3838cecece9d9caa90386f5359ea0eab6d3187d7a58d8dee53375a9cf475b40b121709a27
- TLSH T1C721A7B5E111CC07C1CB8DF33DBD0A7BB06574AA696CC4B29E2E64C90E6322C2762565
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photov_857348197437.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
photov_857348197437.lnk
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
videoa_394710167016.lnk
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target photov_857348197437.lnk
- Size 1KB
- SHA256 9f79935f301bd820d72340b9b115e5b643ff13d43e8b872aa835630479a9d605
- MD5 0ec9677801fff6f151f3eeacb1c4b786
- SHA1 9c6048ab1cb23e35fe2b1e46c8b7e1927195d42f
- SHA512 f1c6db45f4928b981e7d0e85a535514bf277083d575bf2b67705616c7e7417e036715ae1468e87b5220930844edd125618cfcd1a4d8c2886d24fd85ffafb89c6
- TLSH T165319E616FF54421F8B35E7AD5EA6247B831B7377615BC0D4096420CCCF2B46954722E
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_394710167016.mp4
- Size 1KB
- SHA256 f0065f4cb15f6eb6a6dba3c8ff11815acbabba89c4fdb363c288215c1dabc71d
- MD5 8ea6d90d36bea8649d50c4458fd85340
- SHA1 8c477dd6750854254add19aee7f153a1c055a1c4
- SHA512 755166d0f97b8f1bb42077fb57ffa5a04394eeab1ad9b76da0a15623448cddd32eaa37a70ce46f3e4fc3b42c634e196e4fb4e03adda1d2adec15c8f0f3acfe4f
- TLSH T12D11C26007D64A20F7A569B0A87DA7DCB4A9F830ED05516C83A257202AB3659E9B8E21
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)