General
- Target images_20260728_172436.zip
- Size 13KB
- Sample260729-jdvvtsbn91
- SHA256 4a7406fa7cd9d1223b927292671eaa4767008ebb1c3ab0fec77a0e8ea9c27240
- MD5 6e400e741ac695e4b90225da0e372894
- SHA1 4b612a8b55ef283f678efa85090a6194d90f20df
- SHA512 b84786185ed546001e0429b5c38a3a7f0b4dfe91c08e3d0328a37f3f57cb7cb8c553c7461644603a4ab25a95909c5e59dd4b3005bfca47b8c58428c2937d2fef
- SSDEEP 384:eIj5/WDyWHl2EtisF210zpHD7R315R6G2PU2+crroumB3L5X:e85/WWrEYOo0zpHPUP9+dBFX
- TLSH T1EF52BF741FB05266FE6FB17FAC41ADEF87FEB5A88593D545E8D8170AA9861800310C52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260728_225803.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260728_225803.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260728_225803.jpg.lnk
- Size 1KB
- SHA256 7a947110085ffeec0957efedc1e62411ddf424642c9a189f24cbc191f0170d0e
- MD5 b8950b83562dd694ab29a788a475a5d2
- SHA1 4268b99cf71abc3400c103112cc8a45abfbf207d
- SHA512 a66a603bc4345f330b2edaf860f5328633eb196574c70cf8c8f527c15b0286864ddd27677d748bb4c5ac8f83e8bb84374f4aac77ecd120e415c325594dabf683
- TLSH T19B21D2251BF2022CD6B78B3558B6631147257A0FDA498FDF0280C2949964120F878F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.