General

  • Target
    photov_773221035263.zip
  • Size 1KB
  • Sample260729-ntv8ragb45
  • SHA256 bfba0f68e3d05e85c69a1522a0dac24b9e5e1369675e7ef93ed840f97120ac1a
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      photov_773221035263.lnk
    • Size 2KB
    • SHA256 6fe8b3b61d25e0fd3d1e1038247e22acc9f032403d69202704ce4597c8e2cdcd
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      videoa_146769914624.mp4
    • Size 1KB
    • SHA256 b8d7bf3bcef6ea639ee928d0971c4679ae697bc2922d8cfd09e95d5835562804
    • MD5 SHA1 SHA512 TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks