General

  • Target
    photov_832842672736.zip
  • Size 1KB
  • Sample260727-pgfg7sag74
  • SHA256 c657bdae9a4aacc6aa0b29171d28780bbdf2d12d0662cba492788fddb096b911
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      photov_832842672736.lnk
    • Size 1KB
    • SHA256 342b9d93e797d53ce28b4dc21ddd6884ca5d8a09c3d53187d6223a4953e677f8
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      videoa_779445972341.mp4
    • Size 1KB
    • SHA256 3125b6a2ba5980c2d5e959907af92a43ba428f9f330d2a50332ac096894f230c
    • MD5 SHA1 SHA512 TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks