General
- Target images_20260727_201151.zip
- Size 12KB
- Sample260728-mcap2sgf46
- SHA256 d88346856911fe4e4f1bbc5bb2e54cbb2c2737d76e6f4c89bd426077853e5e48
- MD5 8be05b17ff5a66adb7710c6c751ce61a
- SHA1 e48bd404620bc2c06ba861fff9b1da7bc4fb3a49
- SHA512 2844f26ddb32de8337d9bb250ecf5cef328f0ed233dc13a8383801b500bcd91b47adc278ed750802112de9eb16e7fc17c32b56f0929624a840eb4b1c518f243d
- SSDEEP 384:FYnSjdKx6WbrPV1yuknbg79QiehPOZjHcZa:ikdMPbrPV39QphW
- TLSH T1CA42C095C84F27E2CA4E44FB58EF1517155DEF7522A29032B28F6B482C140FECD603E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_132207.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_132207.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_132207.jpg.lnk
- Size 1KB
- SHA256 2331e8ca16edd7cdfdc36fa5e829c72d8497df3e3d21409e11d091d6b7f614bb
- MD5 86190da7a7b590e2612c0a7964fb22de
- SHA1 5cad3dc5ff6216f0e99f3ad8c026d27ab9b3d3cd
- SHA512 2653b8d1478735131863386d0a94abd1aa4d45929f3bc956d8d0690c8a2ec103020ff6c5875e58ebdad82a7126f1d851f0a7977d637d87fd5be7e7cd9d5f9e6c
- TLSH T18421E1211FB20369DABB8B7558B663118732BA1ADF55CF9F02C04194A874120F4B8F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.