General
- Target images_20260728_041812.zip
- Size 12KB
- Sample260728-hf34jsdj5v
- SHA256 9c3d9e77bd4bdf986103793410f422c58b497dae974e2393f04a888df2399de4
- MD5 0fae071ee39c5bfe0b9ae45c976b6520
- SHA1 16df5f3f20cd31ee6b0fefe68c095b96198b24f1
- SHA512 1d401537c4643b68d2b7dfd89a906c7e1d47d948679cbe5a8cf5b8761d81ce16789d7fed2f4591de2bf8cfe349d365e6316bf0a7dd55337f11597491c150ec28
- SSDEEP 384:/7gtwdOenVVRmb4GaFLvLuknxp9YWSneV:/7OwQkA4tFvy6x0WSn+
- TLSH T17C42C09A11C422CBCADF79F5909D24B7A67D770A0FD0D536984F6605C3A3BB8AD0B207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_024541.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_024541.jpg.lnk
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_024541.jpg.lnk
- Size 1KB
- SHA256 a924514866648c4a322aa2a6385a2a8b53bf08f8c44808132d3f5be6cea35111
- MD5 43be9959d57d80776366d8fd859b1d22
- SHA1 0766af9ded9cdf5310b8387af8abcafb4bf177c3
- SHA512 544dafe598eaaffbdee13939cb810d449eb6cf7c190996aff674f7c85419f5b86de5278dbbcacc99b07466f783a0eda5dd9e4919b039683836f4e50cc13b121c
- TLSH T13921E4211BF30379D6BB8B756876A31287327A1ADF458F9F12D081949964124F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.