General
- Target images_20260727_142830.zip
- Size 15KB
- Sample260728-jcg8ca1eph
- SHA256 0581de3be86be85b9d09e2f5a3144e33abce85409c1c491e1b697b8d2d50bca8
- MD5 87e36970bf21f81c96552d68d1643677
- SHA1 128bba954de45065f6885a085d8c727d1266015d
- SHA512 2e456e5a30d6ff185dba7be37ddbd9f11f9e6d628794e970c52f530d58abcb5d6d53d5c2432992626252860ca9c737cac993b72604200177ae96f5e6ed0e901a
- SSDEEP 384:+85tBpKtzlAv52RZjofZDczA2k56/vuCRT:+87BpC/oZczXkQV
- TLSH T19972CFBB830F5CF8D4E6BDF412241CB894CAFDA03DD206EE5C55A179189882EE730326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_070756.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_070756.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_070756.jpg.lnk
- Size 1KB
- SHA256 c2efd13b62bfdeb7ecb70969b6111988d159ca6878097e7f4eb42a04b1818a92
- MD5 df2a29874969cff21d4b5855d157a416
- SHA1 2fdb186569d83c728135cd8da273d2f4f193041a
- SHA512 270d72083aabb50cf833feffefefabc29c2ec96758a8c87b1683e6348871234228271e93a0a260298e2c8367f0b8278543790a0361e651e53092648565f41ea4
- TLSH T10E31E0299BF20229D6B78B345876631183327B0EDA4D8FDF0280C2949965110F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.