General
- Target images_20260728_204623.zip
- Size 8KB
- Sample260729-jdwgcsbp2y
- SHA256 f5fe841a98f372eab1db20a33a15527a637faecd8ee6b3da8c5bc488a1f2e7bf
- MD5 2d71c7c818eab296fcc94299bb0ae19c
- SHA1 2831c22803037a78ade5a64e1fd471cfb93cd5c2
- SHA512 53622516ab1c9c69de97137a0f2aff50f5b0a644d38d14d36fa3bc07a51253affac7cb1c93198e09c2405b198f33aeffe36b872ac59bec535ae823c053da4b7a
- SSDEEP 192:nZGLC3sdagd+0WDdoKuMIxastCXJU7Vk041oEJ4:cCFgd3oeKuSl5UJk041rJ4
- TLSH T10A02AF9A100B9416EFCEA634315D4E5628C76B72D9F042A4C5DE0FFFC3DB960CB55858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260729_061435.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260729_061435.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260729_061435.jpg.lnk
- Size 1KB
- SHA256 e24724950287c5bad045556d2f3eb8bac95932756e80eec22da90b2b3c867d73
- MD5 8f9d0dbc3d485a757bd2c1c1964c835e
- SHA1 5d47d3edeaae4010dcade17902e4b5dc03669941
- SHA512 9379c8b77c75d4baa34478b63f0848fe7a5f5ca099a4ecf5ba9d0439bcaec2edda3259543424e95b9f1ac1a32c8a7192e664df8622c3ea4e3f7b7f3c3e4881e3
- TLSH T1313102298BF21368D6BB8B355872631287367B0EDA4CDFDF1280C2945834120F878F2B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.