General
- Target images_20260728_063621.zip
- Size 8KB
- Sample260728-mb94hsthrd
- SHA256 b2a50e5605bd7ee6639b22b09986d8b5cf4cf231fec51f4e09c37ab3a4a007a4
- MD5 44ea6762eeca371e84bc81ea478d6092
- SHA1 efa114c033b3f9abee41ea77038d04ba7e3f8022
- SHA512 d17602d3e513d27e38e990d89a714f32267b0f645722e985100df9cc542b6d59f8e05d32ffa123829f09f1e98a528e39f393a37f040b68ec59942fae3702573c
- SSDEEP 192:Jl6nocT1y9TqrtVSVpaDiO38v9DnFhVYa3psWDrf:JM1iTqrtVcU81FhGa3ZDrf
- TLSH T13402AEB9FEBCE187C846AB7E70F0DEDF4B928E802854432859345C64DCE9483602CE62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_160102.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_160102.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_160102.jpg.lnk
- Size 1KB
- SHA256 06af14d436cdeb12298ccfeb8e7054d76c14735c3923dcd7b528afc73466644c
- MD5 15b27e8964be33e437e8d405c4d76664
- SHA1 433b5c1be617c6d6b00c82fcf93810757bac240e
- SHA512 d0a711ee9cc5ab81f382841ab2b4c6377f3f8449654ec6d88e25e011311421583823f3715c9129664145d00273859f786139c05add4afb66b474c7f2c5433a76
- TLSH T10121C1251BF20329D6BB8B355876631147367A0EDA55CFDF12D0D2945964120F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.