General
- Target images_20260728_011857.zip
- Size 7KB
- Sample260728-jcjfea1fjc
- SHA256 48ef91044cab35bbecf4b7e920943ebd8a23c1103024c41a8b6bd2ab4b0d8053
- MD5 d0ba54c9bc69fe4bb18bd99b8d160472
- SHA1 4ca7fb26b1e621c3c68e10eca9fbe237f2cbb97c
- SHA512 a413660c85a0f6e02bfc5d34cc8a04c9f0e79674e6b0bec9c80890ad260cd4cd775dcb6a8d6d12566f4b883636f5e586ee78cfb1e0d9dce771fa7565b7483480
- SSDEEP 192:Enavn5hjdIPnedZANkSskYSAZ2Q4Mg+T2ce+:sCnHdEnedZKknSAZh4MEce+
- TLSH T131F19EE6CD2E3DCFA9059E76DD985824121D2DD66D67B314522CF6E928038A021CB0C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_014037.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_014037.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_014037.jpg.lnk
- Size 1KB
- SHA256 a4b24c8cd55704c1344acc23d598099e3a1a7ca07123ddd3cea640f70059e8e5
- MD5 2f10fccde4e5ec29a38beb71dc070f4e
- SHA1 95fdacfab26d73df8ac59a656312e202f8f2b8c2
- SHA512 5a18335c18aa4bc9ff172503e88e564806d3c5e3953addfc45761879f197f827990329af139c880413e0f95440e2e6fd0152d71d01cb677429fe9b058006e2f2
- TLSH T1652111211BF20328D6BB8B756872631183327B0ADA45CFDF12C08194A975124F478F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.