General
- Target images_20260728_021422.zip
- Size 16KB
- Sample260728-jc4fks1fla
- SHA256 ed3b8d3590035ab9bc664a860bf4fc30638260d96b28974857e14c2db359f555
- MD5 b00658300f68e08905e25c01139f75cf
- SHA1 36bba39aa131ee3002e93a1224ac50bea0d524b2
- SHA512 7fb2543ab8699d613c8dc98a852adca40f1604246980577be5deb5aa3a76c619601d66a6f9df0ea5c4ae6304a930a16ba9ee7b6706a22507df12894a24d0e298
- SSDEEP 384:77o1T9JBIxFoGx56eKuEMWFJR3eimxJy+DHds/fn4qVksqhUqmuM1Tbk:v+BIxSGj5kMWPROimxPH84qVTqhW90
- TLSH T19172D14F98257A491BD14639659A753A53CEFCC95342E3CA2D6958ECB836083F0727B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_140220.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_140220.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_140220.jpg.lnk
- Size 1KB
- SHA256 59186a678e2547088ccdfb822bad6dea4340242a46dfdf59127a279fe6783bd2
- MD5 ebe40812b0df732d8d133ed9b408181b
- SHA1 2db196463973750afa64b14c3541ff34799229e7
- SHA512 1ccd0b5a82313158b62e77e94aa0b342a7a5f1912920644d7c62ad19911cf54f4366f0a2bfe96b208fb1ea9603541fe75c669567222cde0c3f27292ae9387339
- TLSH T11531D51D9BF20338D5B78B355876631256217B0EDA0DCFDF1290C2945964120F878F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.