General
- Target images_20260727_214059.zip
- Size 7KB
- Sample260728-mcap2svaje
- SHA256 fb143ac1c0f086dd9d598a8065bea56a0d9f5c5b4c5a9e6e5acced07736f7938
- MD5 7fc6b5b7a73134c46016f3b021af9134
- SHA1 1b11f513cb5e21d8f0133e3dce229cef5e93ec41
- SHA512 17ce4c6c11c6414bfe712d3074af435a153e6c8baab8c2efa6b6844a56d07485f036fa8e1e26c39bfdbae30d3115e2dddc79255f716249dfbacd29a46d5e4080
- SSDEEP 192:Xbil/kWUGJIVy4is8DyC8U+35rkKmr1DRy6f6asZS9qG3qu/qp:rSkcbjsoyI+358DRy06IxY
- TLSH T1EFF19EED1C710612F8D3E07272668A4EEF1AB435DBC9040DDA7DA250C21E769E19EC84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_051703.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_051703.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_051703.jpg.lnk
- Size 1KB
- SHA256 ff15f1cf888afa88a59cc03106ca7262c71baf04a2ea33c8763a9327e1c227ae
- MD5 bb6970d650860b5cc8ac277a99d33892
- SHA1 ee0484dba787311d994c801e491e4e0c3b42c82d
- SHA512 014459a85a17854be1041f4e7545ad952f6cd589607c7514d02c8934a2ba74db68a59160f668d5ed24bbe123c2ec5aade790fec23931451e868875be174df4bb
- TLSH T14521DF255BB31768D6B78B355876A31143217A0EDA45CFDF029082945864120F878F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.