General
- Target images_20260728_061300.zip
- Size 13KB
- Sample260728-mcap2svajg
- SHA256 daa0d694a0c9f209479b32d5fc9d234a84fd5b8f98d7e819096aa6158f4f0988
- MD5 03c13146efebfb6b5f3d839d866471ec
- SHA1 090d175fe850ea2e35bccda4a755fbb07bbc92f0
- SHA512 4a22209f02e6fcc0cbbcb33420e4f3b02dba6a40fd36310cf1a310d599ba90ec8efbf255c56fac61656808b22f16a1ef039857b416003cf0431df7fe79f1371b
- SSDEEP 384:/1+QC/o9VjP7wrp3Q8VXFxWxqIlg+H5UCM:SWjza9wTlVg
- TLSH T1D052D140581977E6A7D11472ACE34BE8E9A44DE5F700ED7EFC2BDA4D297CC060D58C4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_120948.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_120948.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_120948.jpg.lnk
- Size 1KB
- SHA256 4901200ffe5eab0d60fee90f34114e00f35628a336fd56e1e4b25728f268a3f8
- MD5 5529b2f234d78a64dbfc30911abc8522
- SHA1 6328b2011f04fc92e6b7a733f41b51b7ca1d9153
- SHA512 e5628535690672a580f21e6d9484f45a5690ef6239dfea341547c610ad253025037ff205d8fe1c249b28e4a8e830771340517066c2eb1d1e310dfb69f32b6183
- TLSH T14F21C1251BB30329D6BBCB755876631147317A0ADB55CFDF138092949964210F878F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.