General
- Target images_20260727_081833.zip
- Size 16KB
- Sample260728-hhcdls1vct
- SHA256 d0a24e758ab89d6bd36ff53ffef2d0f12365ab15cef0edd02daba97f36987ae6
- MD5 ed8ca5f4dafdd7fc8ae3a6acc0441846
- SHA1 671d44c4ad5341f3a8161febc76ba4cf466a6c1b
- SHA512 e4c852e263d4f2d6cd4713302589417ecd1168bb50d27e48a75d2f6802c5d83d556f3c1e84ffe7c2e0f58d9dc8b617ce8ca6eca8fea5f01a745d319215a8a63c
- SSDEEP 384:J1stvZf8vkjiF4N3Ejfb8iF//LerAkUHP3cblB256Pw0CWi:J16Z0vkjihrbpx9WRB2EPdCWi
- TLSH T17472D0268B9D9160F6DF08B18DD30BF8761C9169BED1A0DD31F3EC55243246C916B0ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_083959.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_083959.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_083959.jpg.lnk
- Size 1KB
- SHA256 bb2c763bfaa4303346f5a48760be04a30be33c909bd4f6eea189bc4a5c288f6f
- MD5 f324b04add331c46903e64dae79b3f98
- SHA1 630e3fa18d94253775786b41f5b80d8026da5b36
- SHA512 cecc18b7e971788b76271c6997dcb4f0ad4c4fd768685da77b1bfb7d1f6b7c5e0a61e170d0c167c7cf25763821805063e164e373259c89f7e1267ced27614b6f
- TLSH T17D31E029DBF20228D5BB4B3558B2631186317B0EEA4CDFDF1380C2949965120F878F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.