General
- Target images_20260728_035840.zip
- Size 6KB
- Sample260728-jch5ms1erh
- SHA256 0c04b4e230f7cf0822335ae5b51518908729b9d4cf3d5edad1ffb517cb69f275
- MD5 2ed5f9f0097da19250706c52a7f52d2f
- SHA1 42abb33e1f7fea1ecdbddb8bfa603a3f8fe2f056
- SHA512 d64d26c1b3df1fb059cd463e39dfd8f3a24f9cb2a21663f65ef01aacae2aed17f43b93d204f477b489d6e0727d7ba775860f4ea4975b0856ac45317fc448e430
- SSDEEP 192:HG0+47tX5O2qKwZyyw27ShU2fTX2tEyol3y9:HZXX9q/wlZhHTvy43y9
- TLSH T1E7E1AF23E608B945D336C5F225FA6B54853D612223046CF65D3D0AD2153B1AF0763AFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_135612.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_135612.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_135612.jpg.lnk
- Size 1KB
- SHA256 0fb8a55678d9d1bd3616db365a13918315d4a5fefc405e7d1b542561a9753e88
- MD5 39c172e709f8318364987a6bd0e4c521
- SHA1 553955d34647460513b025e45615e374e4a66f1e
- SHA512 350aec48c9345ddcbfb6f929b64d574d0497d4638d1f6d0c51c1e853f41400eadd0594c05622625435eb31b64069bc26342577081689e5a5e142cf9d62c4c268
- TLSH T10921AF155BF30329D6BB8B3958B6631187317A0EEA49CFDF1280C2949965120F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.