General
- Target images_20260727_131325.zip
- Size 3KB
- Sample260728-jchtwa1ere
- SHA256 eb74a624eeb75f77ce92d4b0eedc5dbbfe9746e3ab596daa8b801e7e3e19c9da
- MD5 312bea50be05fba706ead688b65aa182
- SHA1 12cac2dca43aa3037abd3aaacc13763d732a8e55
- SHA512 b2b240d8b63c896cd9d7119198a1d69290874c95b2ba83373f394fe3285f2c851c87c746daec92c15145969807d0887643d84fb396ae83a904a18689dade7dee
- TLSH T1E8816C596A65CCC0C3A792F8E6EAB9DA603685E897C17724E92B611CC490CCC527E1A3
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_215016.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_215016.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_215016.jpg.lnk
- Size 1KB
- SHA256 f16a67c07135587fd97ecb945ce25204cc07d4675dd373b3bb856c4c9e4c3147
- MD5 dd09a34e592fca670f090ac1dde57b3c
- SHA1 bf495764d64be3e82a4c5ca65961b643a66468d2
- SHA512 a2b9a01ddc8af4d5eef47f41a90295236eaadf306276adda8e90ba415635ae2b3a6f004e1d438205f4966370f8ea65f811499fda9b04d31ea9c5b5e8b0d64d4c
- TLSH T11D21C1251BB21369D6BB8B795876631187327E0ADA45CFDF03D08294A964120F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.