General
- Target images_20260727_084709.zip
- Size 14KB
- Sample260728-jcg8ca1eqa
- SHA256 ff227f252b32e43e918752e4ec9a4b555e9db7c72ec7a06c7c87c3892778be6e
- MD5 6ceac46faa68436c13e666aec0ae4baf
- SHA1 2950df98ecdb11cff4624e3e5561fbe44b9a2508
- SHA512 f4d7a8fac58c10c50f173436d298b5076cdc3f094b96558680c463c5b94424380f6b4b86b3f7fdd4663602d4fe30cf5859b831db4dfbbba0aa1d502ff85c8d91
- SSDEEP 384:7Nc6Yvitbr7yOmSKB0j4v89zxoFsQOonNGWyMx3aW:kvitX7y50UUdxoCUnR39
- TLSH T18052C030CD10A1109F749E77F9D3DB53A08489E6F06FA3A87E2F600F406DA42496E7A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_030806.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_030806.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_030806.jpg.lnk
- Size 1KB
- SHA256 520ccc62960c7b91855d59f04d9ecf8d87babfc6529c50b9ee134a7e35295701
- MD5 684933f84bf2f288bbeee470c222c37f
- SHA1 93143dfa47b42e1ad4fd0e3eea64571682408754
- SHA512 28d013b2df344fa4f2e5c3ef73bc1ac32195a42e7aee046a314d885b41f060bcf4e11cdfea3beb4d0c3e97f42300475fd37c8c06d54ffb5873218ffe7dc913d6
- TLSH T1C031DD289BF20228D6B78B3558B6631186217B1EDA5CCFDF1280C2945565510F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.