Overview
overview
7Static
static
1Court Acce...EJ.lnk
windows10-2004-x64
7Court Acce...EJ.lnk
windows11-ltsc_2024-x64
5Evidence 2...32.lnk
windows10-2004-x64
7Evidence 2...32.lnk
windows11-ltsc_2024-x64
5Graphic de...2D.lnk
windows10-2004-x64
7Graphic de...2D.lnk
windows11-ltsc_2024-x64
5Registrati...21.lnk
windows10-2004-x64
7Registrati...21.lnk
windows11-ltsc_2024-x64
5l.xls
windows10-2004-x64
1l.xls
windows11-ltsc_2024-x64
1General
- Target 27072026_1709_Court Acceptance Document 33UEJ.lnk.zip
- Size 9KB
- Sample260727-vpkpsaam6w
- SHA256 6e02f2eb5e26cd8458fd18ec8b00fc5bd60f69bb9a3b52576bb87a7aaf6eb42c
- MD5 e4aa91f9bd4439a074f2bbdae266e24d
- SHA1 181225915dc70322a40a8bfc33dc0d38811d65f0
- SHA512 02d2ed1068bd4c34ce80e4e1d46c424115d07ba0339f3a39a96ae3369893e833fec0c5c2e217a8da00a1be208bf8db24270629a8b9c8af08dbe5217e6049caec
- SSDEEP 192:H1OeU7hKY5vQkrPT2L0w6oo42vBV4U7VGn+FzO:sphRvQ+PTVw6ooRvzx6u6
- TLSH T17C12AF70D22EC1C6C75222315A07D9315DDE7E3BD68D238130DA15ACD9539F86AF096E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Court Acceptance Document 33UEJ.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Court Acceptance Document 33UEJ.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Evidence 2024JN-32.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Evidence 2024JN-32.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Graphic design drawing 2025-UN2D.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Graphic design drawing 2025-UN2D.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Registration Certificate 2025DHI-221.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Registration Certificate 2025DHI-221.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
l.xls
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
l.xls
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target Court Acceptance Document 33UEJ.lnk
- Size 1KB
- SHA256 ab6d8966249ae785fecfa25232493d3852dc8df1028b4a51d86150d70c44ff6f
- MD5 d5bd0a7a44bb787fd4aefd9c29a418a3
- SHA1 f7a80ca36dfe372bd4ab2e9ec27ffa1ed4c66d81
- SHA512 1646cd271020569b3ed6bfe39f6e6e51ff05d7c4713fa9a8e665e3398ec4f3373bf500e2d92015fccef09b59e0340222eee4b742ca6841e574b63eaa255ffd2a
- TLSH T18441EB3C5B881B54E3B2473384AA62329A60B80AF755AF190AC032C4C958A01FA73E2D
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.
-
- Target Evidence 2024JN-32.lnk
- Size 1KB
- SHA256 a05f04ba50635a7f4cf5d7d2a9856d9050afd59b5d360177cf302c45437b5650
- MD5 bc1163fc0324734bedecbdd76c1fefc2
- SHA1 603e5d3e0eb19c6c9707e3b0ac83cd7e957d3791
- SHA512 d94a93d8eea815467fc00f77d3512b89d9d99fda38530c2281752dcf59edbe872568c59139249cccb08df4b6b3c5ea121a3f920f1d0600dddbc659965f537bc2
- TLSH T18241C23D5BC81B54E3B1473784BA7232AA60B815F755EF1905C032C4C955701FA73E29
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.
-
- Target Graphic design drawing 2025-UN2D.lnk
- Size 1KB
- SHA256 9d92e39db355cf694429991e78ac2252ca9a2aaace0f7f572f4584935c161cd4
- MD5 9790c1885bb0db12a7f2d5dfa7bf5e5c
- SHA1 e0cbb7fbce0ef38c2b9d12df3a5d21261fb4ee52
- SHA512 8c70a5bddb31ea263ace97a0357ae32f06eda0a186356da8586d31308826a059f6540ed0b7c24166bf994f2c80e639a938d221e484f8036a12d46d4a2299b05e
- TLSH T1F941CE3D5BC81B54E7B2473784BE72329A60B81AF755EF190AC032C4C959A01FA73E29
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.
-
- Target Registration Certificate 2025DHI-221.lnk
- Size 1KB
- SHA256 04936bc20d3feaeccbdeeca14e698a3ee869ad988b7742286865fc87836ae81e
- MD5 1b5423a36ec3e64d9195f350d1df15d5
- SHA1 dee39c25bd46f2d500c99df09b6be4da4601305d
- SHA512 68b9455e21b15f1e29cade3130d2bf007ba71b287029e18632bcc3fd982f08de0dd93621919f4ef70485aa0114ea94c9f9885016bc950d80dd6a1f5f1ba569f4
- TLSH T11041AF3D5B881B54E3B2073784AA62329E60B819F755AF1905C033C4C955601FA73E29
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.
-
- Target l.xls
- Size 20KB
- SHA256 3eaa436b4c6b60a2b55f793e247cd1b0fffa2b35bed04e53af6b738f4f400a19
- MD5 3648d418aeacacae6744d000b1bab8db
- SHA1 51a0ebb6e8d334b0558e73e58cc549372e9fdd06
- SHA512 41e4f2c2bcf8517e98cedd6fc6d8a421e81a02a1688a87446aeefe69c0e946b9f11936280d75d4480fb388553f7d6fa96a9f919d08610bf2c5ba38a409c67807
- SSDEEP 384:cCCCTbQeoPE8lSKI0fXb4RznmCHTmbmPNrriNHrgdsI4KOtOt8N9wDat5RmqEEqS:cCCCTbQeoPE8lSKI0fXb4RztDat5RoNS
- TLSH T1F0921D16E7C38C88DA1E4376D29B96227333BC414B73835B2A68F74B5AB59C0C943B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10