General
- Target images_20260727_122359.zip
- Size 8KB
- Sample260728-hf3ssadj4z
- SHA256 270feb2e05071a737a7abcb5004cdccfba48736a244d1bb701c13747f24194d7
- MD5 f3730db25999a3d002fd37066f561956
- SHA1 59e17809a658cadbde55e5c730995def6d71e951
- SHA512 941d4d4183222a556d4c89d8290176294db62d37b12fe54603f633c9164a93b85fd134eabeb56d7ace9090a0096063f2729e03a5a5d5c4f900512c544e6e9366
- SSDEEP 192:MKwEuqwh7xe/N9yoHleZxP4LDbXmwvZNRAZziJnGDx4s6SPzTyA/BurgQ:MKpuV7x2Nl4xQXb2wvWiZ436SPzTy/EQ
- TLSH T10D029E0B3E418B19FAAB73862BE84F1E3E28C57D0EA5B5D3378602C441D85D42D1B0DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_170207.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_170207.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_170207.jpg.lnk
- Size 1KB
- SHA256 4bff6163993c3389a782d1d5e43d17fb306a31789455dc64cdf82b35deeeadc6
- MD5 e0e204f77f5f61b9ad09480c47ec67c7
- SHA1 cbac15a1d3b4ffe199a771cb3fabce5a693dd3d6
- SHA512 16ea23a5c5af603829d5e3fc1a01b09d679c1bfefc85d41045edecbb2e8fb10fa8e40891139a2655dbe8f61153a4deb69d773276e42f8f3b6121ac8b8e0415f1
- TLSH T18121E4211BF30369D6FB8B795876631187327A0ADB55CF9F039041949864120F478F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.