General
- Target images_20260728_031703.zip
- Size 16KB
- Sample260728-hf9akazgrb
- SHA256 1d22d8fdadcf5a2d5d6735f0281b29d0ae33408d1fcf209eb04e7906ec8ec871
- MD5 43c8bd918c5333dcad29ba3225cb040e
- SHA1 e7c74e0a5edd49d1d47e37cd0a9e42c4d6be9feb
- SHA512 7b56f27df9b1484849e1170df7302d1c6762da19950ff5698be2e8e111ffdc5399ee9c8c384992fcfd3f15491541ee14793fa8816b85136a691f691a333ab472
- SSDEEP 384:ywRzPQAhIOjcM8GW5db6NFz5JELRLuz6MTDuSxZ:HdP1hhjcAW5dbM9fqNuzISX
- TLSH T13772BFB8746B0055D1A3E66AF4993E986307C7C2955B04C993EE6FF93C2AD1C9C4B1C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_042809.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_042809.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_042809.jpg.lnk
- Size 1KB
- SHA256 36135459ff03fffb876106468754d0fa1bf72b9f7ceecfcc23c72c92c14c3b92
- MD5 5f5a8c0e1d126166e0a402e07c4b5b39
- SHA1 872905fce0330744f999954f025cdfd965892892
- SHA512 1ea9898361e508bd829ef0b681956cdcb063f33c572eafcd3807f08c5072847d069f95f67639ca0978f3c13b15fb0f48620e1df86523a15739ba50251f414a6f
- TLSH T19B21C1251BB21369D6BB8B795876631187317A0ADA458F9F128082949864120F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.