General
- Target 27072026_1610_invoice_files.zip
- Size 515B
- Sample260727-tmwtlaxsds
- SHA256 7ea7cf26dc805352ae969f319cc59de6a00f75e774a4cf1a914619885693d3ea
- MD5 94c9467948909fd16a641cfcd1157dc3
- SHA1 1bbbc970d2a4e7d99692d6c85ef31377e06f5692
- SHA512 2a83dc858dd940240a203356fbbd0c81a4d15ffcb48681bb95ba368505048e88a09669d85f47a459a257a043a1c63f6e9b4a89475920e6a1583ca79a71a19e5d
- TLSH T183F00E209E630E13DC09F0701C93D30E1AA24013D204BEBF4A6A9208F915692E822D66
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
old_inv.lnk
Resource
win10v2004-20260513-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
old_inv.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
300 seconds
Malware Config
Targets
-
- Target old_inv.lnk
- Size 1KB
- SHA256 744a95969080de71859736265fa5ac692ec836778fc44936f12e4c5033fbf9fb
- MD5 a84edfd97e4344633ca058d9b945ee29
- SHA1 795f9708eea63d5fc9aa28b8801d63a2ee06adc6
- SHA512 a3ff07ae2196b42905067a9aa0d7975f5eda4883c26c3b68189186b4a0748de141fbbfced458268c49a2b898a4459275b9110e64f5f172311dceb348495a69c9
- TLSH T1E92155620B880E95D5B09AB964BDE340F7783847C8C768DA00DA244444F1FB08275E8F
- MD5 SHA1 SHA512 TLSH
Score8/10-
Indicator Removal: Network Share Connection Removal
Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.