General

  • Target
    photov_166169748705.zip
  • Size 1KB
  • Sample260727-qmphqsbb68
  • SHA256 267c933cf079155fbc54d217b9acca3f65db343ca03fe8f6e05f607c548c5138
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      photov_166169748705.lnk
    • Size 1KB
    • SHA256 32b6e55eadbb2635e75f1e8cdbcdb1f2d8e57009823d3d01088073f7541d8135
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      videoa_887420520215.mp4
    • Size 1008B
    • SHA256 ca9675f8116287d8dcb1e41efe2747d5f47243f682f17f88260ce4ea4cd4ffed
    • MD5 SHA1 SHA512 TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks