General
- Target images_20260727_132634.zip
- Size 15KB
- Sample260728-hf5mdadj5w
- SHA256 f7f8334d1ed54504d07483824e35ab14fa6a544b0a16dc3a89f9bb3fcb8367ed
- MD5 9c3e6f8e33448dcafbfc865847cd4b6c
- SHA1 9333e3b7fe96398e18f13feb002734d42bd7deff
- SHA512 8a76ed034f668403e9eeefd28cb2699b7860c3562e3d092902e0dcd5678136437c8efd031314d1ef3c8c82758d1a56fbb8a7e1f3cdbb8d608d30c8c8c2ddc1f0
- SSDEEP 384:KUW7A0m3+Bk8oVuVnMKcqitg9gq1DPqcFlN11b/T:2Sp8Z35icFTT
- TLSH T15B72D0B9838D662BBD15C51A3AD81F6A4B65F0303715F47333F840781588FBC2D21A68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_062717.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_062717.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_062717.jpg.lnk
- Size 1KB
- SHA256 110e1b80a8d8e58453104975ef0c736014e2da5a44f6c4b54caad26a4797adab
- MD5 fa15e2db614a37d1ca6257ec442ae586
- SHA1 ee2f80dcb86c252407816e5670410db8da14976e
- SHA512 0ad5135650bd7009711214b1e1b216c21fbd60b17407b87171461626008b4330d0717a0628c0d63abb182094af35f64eef745e4d31934eda2e5427a1157dd7b4
- TLSH T18E21F1251BF30369D6BB8F755872631143227A0EDB458FDF1380C2949864220F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.