General
- Target images_20260727_071705.zip
- Size 2KB
- Sample260728-jch5ms1erg
- SHA256 6f12eff294d3193aa7acc64a95cb073320fea330c824952a7800725f185a4018
- MD5 09d15c4a69a01d8937d4b3fd1fd3d6e1
- SHA1 10bb221b6aeeba7e6b8d716ca023d35197197f8c
- SHA512 5af21ab670241588a0c57ed1b5b10cf607b4f0832450c44d432b628ddfea32e053a904d2043eb9637b081fbd24c55e157f6ea853f1eedca80316ab75d3ad23b5
- TLSH T16141F8A9CD259B63C473D4706B76532C93BFE4B60A258C458B8407A43BD1B023BBCC98
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_125609.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_125609.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_125609.jpg.lnk
- Size 1KB
- SHA256 f956c08b915bf49d91c93825244f3daff517c8ed8302fe52d990748c9f3f3d50
- MD5 bc09444a0511460806275918ca857eec
- SHA1 f4d7228c2a742f1fbca5763b4a75e27ef7eadb48
- SHA512 e371a8db6f672c4258d4aeefd011b5f30ab2d9abb201ebec58f544959d47879859fa621971b7401f68ca6f21032251aef9f5b3df0e701e3eb1f9dee61c426a0e
- TLSH T1CF31CD295BF20328D6BB8B355876631197327A0EEA498FDF1280C294A964110EC78F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.