General
- Target images_20260727_073757.zip
- Size 4KB
- Sample260728-hf3ssadj41
- SHA256 89e58d3235575545f5bba34cb433378a66818bb6fb7cdf379b5a2f6c49402bd6
- MD5 749abe33598fbadfad224b7aee58cbca
- SHA1 16a4ee34b9a8ecc8dc48d03b94c39ed395a8c24e
- SHA512 ee149aecee9c1ad493812afa28a60416013fe43f6ea902b82f6bfa461d454410452c67c71f8441be20c7d01322356e697017060a72e07307b9309adfa01c2307
- SSDEEP 96:go8FBfzMttY40WTLoomwJB41jsd7ymsKCwTRHLdi2d1fdfTK:8zMz/0YLiwSsd7yhrwT1Ldpfs
- TLSH T11A815E59DAC3D89AB135303438D83BEC57B4B12C12C1B5FA5337E8C827616215AA8F52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_104811.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_104811.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_104811.jpg.lnk
- Size 1KB
- SHA256 d1717f39b2721eb4dc6b0f304f405cfbdd96bf6e9a27f574691a39b6e1719ed3
- MD5 96c939d585965cb3a8aba731125f2b8f
- SHA1 be6f52e16bc93c4c27812ba32b80bb08a609fca2
- SHA512 7f6fec4871073ed973622da56b3e20fc034e822ff76ea77f3b22e6aa9bb58952b5999ef21786f6a95088daa35e945618a1d467068603ca0be1bc4617ca8001a9
- TLSH T13321E1221BB31369D6BB8B3558B6631187327A0ADE55CFDF128082A89974124F479F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.