General
- Target images_20260727_202732.zip
- Size 12KB
- Sample260728-mcaeaagf44
- SHA256 aed136eb126f89f36d3860af3a604e962ef7cf11e576e56cf271fcf6dbe44f0e
- MD5 61452f215bc3f5d0f500b06055830b3e
- SHA1 eff9756b395571d46317713f943dcaae9dca901b
- SHA512 78742a222a7be0033cc92de86dcec3839827536bb14e54e1b88954430934eaf8108c3e318faa1cf086785b6b22e6f65b7acdcc40d026c768928037798ed10845
- SSDEEP 384:QmYJVGI+bPX/gomi5sidljd1lLDZBlQi6Jp:Qvr+bvjD5s6lj3BG
- TLSH T10E42BE3BD145074FEBC241B498DF89181AFC31A0A55B3ABB35AC084A19A752AD50760F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_214051.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_214051.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_214051.jpg.lnk
- Size 1KB
- SHA256 a811a6fe7708a2e5db048bdb97ab54593be8341cceca6668d678f8c0002af7c2
- MD5 c5882facdd27600afdbcff412650d838
- SHA1 dcb425beb6014e942f0d61ff16d3ac62a4eed971
- SHA512 bf7f0394355d84a4b79cfa36530a8f29d6b04f0ab5cd1abc362f48a9d73ba15c12d2a96f62fb3faf194c754061b9a65c9eaaf92938bbb87e4b8b393f325764ad
- TLSH T1BB21FE251BF20729D6BB8B355C76631187227A0EDA15CFDF02D082989964220F8B8F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.