General
- Target images_20260727_133747.zip
- Size 13KB
- Sample260728-mb94hsthrc
- SHA256 a5e1959965737b3981bc711e6041c823234508bca9415b2638f547f2f704e6e7
- MD5 7274d04756599e2dfeff0d75cb84508f
- SHA1 5b7004b70ae61599bb7886460cc2d20378b217f7
- SHA512 2f78a8e620d3875f80ec273a6b66d0f65134dc7bd4c47325a23f00d7dbf5ff1aea38b249d53ca9512b4b643a5815ce7e339623aeb0b5e841dd5edf881a3f89ee
- SSDEEP 384:j1nTGXagt0Y0aJVtIb+1F6nGvMYhPswL1Gb:j1nngtd0aJi+DTEYWl
- TLSH T12152B054C36E5D5FFC7009E99322F6B0FA1B781662407DC2958083D9AD2921DE4B4A5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_071816.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_071816.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_071816.jpg.lnk
- Size 1KB
- SHA256 c1fe006741cada5836267c468a7ceb62833f6aadb9cff83a3b7547d5daa6253f
- MD5 6163e8fd6bfd69fa13f9cb88f1a7d04d
- SHA1 138735e30508e5b2e002a3349e099fa387e07697
- SHA512 70670b22bd0211e249ffb211e160836f21f170bdda4061a5b12de70c18b56eef25e8a241746208daef125af40d5f2e90daf71f5176229d3efdd8464b2e7aeba1
- TLSH T1A821DF151BF20329D6BB8B755876631147367A0ADA098FDF02C082945964120F878F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.