General
- Target images_20260729_030742.zip
- Size 14KB
- Sample260729-jdvj3aybkh
- SHA256 38ce4bb882a9cfbfac947bf01f3cea063dc04286a17c4efea9a0cb3569d86dde
- MD5 cd319bbd64bb4fc86430db7cfa32aaef
- SHA1 0c174586ba135fc60094b3211f99dd02e27974f7
- SHA512 47600bdeb140423167c279e8f634306345991eec1b1eff6556d704e9a8bcbfdf317f300ed5bd21064a7988672991c371cb8eb0badcde7d1bb898384caa96f809
- SSDEEP 384:iiHJp4xf6z1BpebLUXRwNPto8gyesW2xllHuEO8ugySHcdkob:iiHJ2+TiLcRIPto8pesncETHcp
- TLSH T1D762C1A6E2652737D211E051D00B4C0B1EBD849FD9F21A13F3EA8CEF995515E2918EAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_234637.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_234637.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_234637.jpg.lnk
- Size 1KB
- SHA256 0ba2831343ac29a3318fdad124f0af4a6766042558743ce61f94b6fe0f525507
- MD5 58fb0267c806fdf25af7ad86ae1ec9f0
- SHA1 c1e06a222ed85d625aa256b8f6f355912c55ccb5
- SHA512 4193bf7eda59bca51e2b2e9d23ddd79913facc237cc962cf001dd307969636a012a0a60a8ec1e406423c1eb30260d969909b2e1cf48d0666418f84ab558f5be5
- TLSH T16D21C1211BB2032DDABB8B755876631187227A0ADB458FDF138082949964120F478F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.