General
- Target images_20260727_174906.zip
- Size 16KB
- Sample260728-jckcps1fkd
- SHA256 009803420ed70ac96ff0783784ddd70bfa1b05f430fc753278b9266e7848a32a
- MD5 c93b565d9c6b897e127a17ffcaa8d50e
- SHA1 67768afe9c7413efd88c741df27c445ce2f66d9b
- SHA512 e9fae289d5c46a542e1b6f4effb4a3b007afec314ca105a67928ffa15da1d0a258d51225d95e74b72cf9276259afe47d5a18cebdf6a1b5c6ae5cef1a71a4d6f2
- SSDEEP 384:0OlPiKg1T/tQs6BwINOqEs/fmh4OZcNxNFyee9DhTVcvyaFfY:0OtgZ/KNOqD/+WOExNFyN9DhxMzpY
- TLSH T16572DF96CB8A17A2C53AF1782DCC9DA782E4B06ABE6531F6C541A15D5F010902FE3B28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_073318.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_073318.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_073318.jpg.lnk
- Size 1KB
- SHA256 7f36af3651230837bf3198253501377e810198a92ace1a5a39bcbee64f828b04
- MD5 a96aeef4984e430c161c3672ff44c088
- SHA1 967b27214d2b9602b6114effad5c4045934325b2
- SHA512 175ea9312aa74c05099eb407983b21a78c9339e347209592ab330dfee42ca97b53faa6bde6a7d743d4385337c9cfed677427704afb3b0901a4c93cd4b8728abe
- TLSH T1FA21E4211BF30329D6BB8B395876631187357A1ADE55CFDF12D081946974120F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.