General
- Target images_20260727_191615.zip
- Size 16KB
- Sample260728-jc4rca1fle
- SHA256 c2f980609eddd00c7f0de89bde406e9849b6294d2e4b618d7cc20256b233853c
- MD5 c4f6a769ef0267d5e319a9ad929085b3
- SHA1 78a73568a38cec78c2b613df369a670e0d9dcee7
- SHA512 ccb8006f987f72f80ff1600d99c4ac2d49a014de0d9c3e98fe877377ce5de0a19119feb5a5bb25269a067a92cff333fa4b0f57965230392b258f649e9713239c
- SSDEEP 384:kkeybMIPtGO81FBomQpOxIMSdgQMsNNkW4sUzpFdC:5MoGO81FBoeLhQvNByF0
- TLSH T1B572E113F3C24863ED4C6CA781366BE36AD2DB0FE4927F91ACA8F1CD1112409589782F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_115121.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_115121.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_115121.jpg.lnk
- Size 1KB
- SHA256 0bc92f1e861fdbb789f482fc48b71f8507cda1134b65f97b486a0737bdd6a4f6
- MD5 01986fd26126a3e8edbe7e9d76b72274
- SHA1 43d4fa433e87d8b9cd40de4b3bf6540b826a7bc1
- SHA512 41b7412cbc2c850136836b9b9a9c038a339e3a88c4ea18a901de0fc6a8941aee3a26646cf3b2b0caf9be79e8cf50cececc7418bf38209b973a2effbdc29e2958
- TLSH T1EB31DD29DBF21228C6B78B355872631186317B0EEA4D8FDF0290C2945964121F878F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.