General
- Target images_20260727_211350.zip
- Size 9KB
- Sample260728-jchtwa1erb
- SHA256 71455de2becfa32d073fcd01215c2c5f3ed06b8e3f01eb1c096a159cf62fa52b
- MD5 1420772957a8c993ff7cde2f4f435dff
- SHA1 5e55ea1f9a25eeb03cd41ed8bc5b5f268ea60b85
- SHA512 991d2c804aaa30db369002a05644ffa4ce7c2ee00c9bb573455522f895ecb9c11fb595560541fa907dc0ff39824a8c2af339e78316535255ba7ae00349347b98
- SSDEEP 192:b9++2hhLTZBYf9a0aukx84hVNvxX4llsn154Lg3RtL4k0:b9++2ZBal4hVNJX6y4g3LLN0
- TLSH T10112C076450170A7C2FF941CAB8406708D1D28416F3473BAAAE1EFCDC8F6A158F43A1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_190503.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_190503.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_190503.jpg.lnk
- Size 1KB
- SHA256 bd7d06f36b85f9ee24a8f2c965fece508c6e35dcf810f58db796bf4054b83772
- MD5 9a24b6414fb77971e9139c77e3889f65
- SHA1 27209f87983be46c80336df2328cda20c8cf65ae
- SHA512 72d5d051928a9a9d8a163581fc1b1fbcb06d0b77d4121e63544d9fc80e7592cca0e0ad48dc6d5f1ba28d1e15def89cbdb58276a425d3818154e7815a1cc34c02
- TLSH T1BC21E4111BF21369D6BB8B35587563118732BA1ADA55CFDF13C081949564210F478F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.