General
- Target images_20260727_175446.zip
- Size 10KB
- Sample260728-jchtwa1era
- SHA256 78df7e7fbcea7a4c9c8515a0202c96b3cccad3fee942ac55261a56a7862687b5
- MD5 2be804bebd535f090cc82e3f0ca3f0fc
- SHA1 b69fcf426a15ab926a14253cf56cb051af880aa2
- SHA512 ddb98eeccbffa2f08b1c8c80753c760243492f0ae06de261efcc032ae71d642c635047776a5361eb133cf77bc18fccb367006dd3f2002c77be1e2eb988e73a41
- SSDEEP 192:1/Svt3KT2xEI8ysT8jCevdxyR163izWwGPsRWLKvTAqTAazr/DT6xn72:1/So6mVT8jCGdxcKxVPlKUazrr+E
- TLSH T10132BFE10746500FC126F37E3DF04C8C9448614B3A3EB9C65615BC6B668AF779326DAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_011900.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_011900.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_011900.jpg.lnk
- Size 1KB
- SHA256 822a30c6664a7898e044b860bef3810268bae579359ce3a44de25ccb0f977076
- MD5 df7d6c0e534a19bdcc059bb2e9fbdba4
- SHA1 1343569b09aad34428a516b88106e96850abc896
- SHA512 6cd73b76565315646a46c8b670b6a05e6fde6f3b31cf48d1c2180580fc4fa0384db65018b71aea2f9513f69b5cf6f3ca28f1873915ab9d016eef0d301822a861
- TLSH T1D03102299BF21238D6B74B7858B2631147227B0EDA4DDFDF0280C2949964110FC78F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.