General
- Target photov_832842672736.zip
- Size 1KB
- Sample260727-pgfg7sag74
- SHA256 c657bdae9a4aacc6aa0b29171d28780bbdf2d12d0662cba492788fddb096b911
- MD5 26bb913b26f88abcfb1c185ecbb7acc1
- SHA1 483ff301c59401bff7741dc2708e0208c1cf6294
- SHA512 ca1cdbd9bc69dd62414a51e23412c2869f1c2d75f34c4705234da0abd7909f9a0e4281bf10fd06ca13aaf17562102293eaaefc2fa7233f181f97e35768a781a2
- TLSH T12B21F972240DC8DBCC04CA3AFC3BD3C290885CE9624384B71784FDD57FA349485007AA
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photov_832842672736.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
photov_832842672736.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
videoa_779445972341.lnk
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target photov_832842672736.lnk
- Size 1KB
- SHA256 342b9d93e797d53ce28b4dc21ddd6884ca5d8a09c3d53187d6223a4953e677f8
- MD5 0cc5e1d1868b0503936027123c4fe9e7
- SHA1 f14989d75ca56d4844d6fca3a2bbc095f478f413
- SHA512 d3ff681d63f64afebbe1cd1ce0ed7f8f6c5b2730bacb3cb9a685c83c974b895037f4336733c21ce11cc47b88c4329dcaec66df1f1f4dbd8e744b3c47eacd1388
- TLSH T1963150685FA2C566F4F26E72EDEE3147B8616B357911DC0B1055820C40F3E09D766E2D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_779445972341.mp4
- Size 1KB
- SHA256 3125b6a2ba5980c2d5e959907af92a43ba428f9f330d2a50332ac096894f230c
- MD5 9582b15883bbe7da69b717fc92cfced2
- SHA1 e7c8b872aa2e9142eec45036b3021f9e5cfbbdcb
- SHA512 84af802c4c635bbde79094a590d816be39c809e83eb7f8bd853b9f48f0ea7d21312cda4fbb39d4ed6340bb35df43b66fe45aad80b67f1a40c7dee253090630f4
- TLSH T1C311E7E427E30F25DE5A4DF41D7E01483C78B4102D0D91D8828541435533354F80BF32
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)