General
- Target photov_273719554066.zip
- Size 1KB
- Sample260727-pg1s5sag78
- SHA256 1c77cb63396a26c426c338561ac21855c986ae0fd8a201c644275296158667f9
- MD5 a624cd5a6571ed9bfc8823be2da7ef0f
- SHA1 81601c4b333ac59c8f8b521d4b346c3887fae095
- SHA512 9fcf403241eafa69063d759c85aeb09135baec3ba286b42d0dd42888b2c463f2406a20cd9983761e2521f9f1cbd6a6e3e77342e2f6051c28216c3efbb6bcc6ec
- TLSH T16E21D7C7956BCAD8D17BBBF334486F086228B57C0104DACB21603DEC3F8B00CA326282
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photov_273719554066.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
photov_273719554066.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
videoa_433986620277.lnk
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target photov_273719554066.lnk
- Size 1KB
- SHA256 89e810c1b7c1d9c8d36ab0eaf1e6156ee8505716bdc3df7a146cf390cff7a1ca
- MD5 49a896ba8403abba939a9af7c84ca09b
- SHA1 6a9fb81d0b9c4fd38b57e4fc815b784bae8e72f4
- SHA512 459676e12888dc32774b9fc76bad583a551057709d3ec17def583974116227d0233184f5e9fbe1e10df21a054430a827e128c3b148e7218d82b026a1e570cf9e
- TLSH T1603172F86BD40535F9F68B32C5EF6151F475E6256126ED0810D6410C88F1A9D78AE12E
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_433986620277.mp4
- Size 1KB
- SHA256 2e23551ffb80bc4f37a7f9fae89d3d2d672a7d3778ea2854e69c34a504cf8ad3
- MD5 e8b69b1c5cbecb778507c248913b7f0f
- SHA1 2e3bcd8bab36655a9bf70bdcca15499c1dcb0295
- SHA512 2f82bd388813dcd564f3569a04a5e0e9823074f3f0726cd26629cad071a36a8212b26bafe3bd97b94c6ed2b6f1d471c20864f879e8969f261e940bf8d75c89a8
- TLSH T10211C2A00BD79B21E266097DAC3C1688A07578256C09A18D50199A9969352689945A37
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)