General
- Target images_20260727_213802.zip
- Size 9KB
- Sample260728-mcaeaathrf
- SHA256 b77a8f3ef542fd4ced3cd9ff372255ba95e7ec5208a415636bcd4f023440c5be
- MD5 bb30d02aa9f3b179aec6a9d117cb8ca3
- SHA1 82a8193ca2a855accdc85a85435a113532c22e59
- SHA512 18201a19c403317cf079432d7f0c9cb8cdcc0daaefde9f8383142afdd087ddfce709d21c1be10117d7d1192aadf06c554b7ba242ae06cda06dd429cbab8168fe
- SSDEEP 192:8mAq4MpD3R7j5snxrh6mWFDVV8OHQSI8VsLjRgiSwEOxZaDXXDIdSW:vAk/aHNWFDVSO/sLjq4arD4j
- TLSH T1AA12AFC654E1CF6EF59755B764BB10EC4CAC9EB72868878B849B89C0AD88351071AAB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_143452.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_143452.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_143452.jpg.lnk
- Size 1KB
- SHA256 e4cc04c73e914171c53c1f7011d78b9b67a130a55c512d4933f911137d350b66
- MD5 06b8b1488a000fc54c9ca48b97211725
- SHA1 af009fad1e172b0b83eeef6583d179964f89f148
- SHA512 ab3bfba4d87265a59e03723bf6a8c3e154b4e790a36cbe23f78ae85aa209260c5070660c960823dfcd921733f2f16fb1cbebcd098bf922e09573457c3f1639e7
- TLSH T10621CE211BB20379D6BB8B7558B6631187267A1ADA458FDF139082949964220F4B8F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.