General

  • Target
    photov_273719554066.zip
  • Size 1KB
  • Sample260727-pg1s5sag78
  • SHA256 1c77cb63396a26c426c338561ac21855c986ae0fd8a201c644275296158667f9
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      photov_273719554066.lnk
    • Size 1KB
    • SHA256 89e810c1b7c1d9c8d36ab0eaf1e6156ee8505716bdc3df7a146cf390cff7a1ca
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      videoa_433986620277.mp4
    • Size 1KB
    • SHA256 2e23551ffb80bc4f37a7f9fae89d3d2d672a7d3778ea2854e69c34a504cf8ad3
    • MD5 SHA1 SHA512 TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks