General
- Target photov_773221035263.zip
- Size 1KB
- Sample260729-ntv8ragb45
- SHA256 bfba0f68e3d05e85c69a1522a0dac24b9e5e1369675e7ef93ed840f97120ac1a
- MD5 d2ae64f1b9256e41579d3cfd39de31f3
- SHA1 904c8e6fd53bdb6a7775edf00a993ae5c8a3ce3a
- SHA512 56a9dd397d79a87be7a275999c8a6675dc442ddd0085f532b5069c79f84980d08ca0ab66eb133263ca5e360b5234ce4d65f9c873d34708da8350f4211c10976e
- TLSH T1B821C5E8A59443A5CC172171FE53ED0C322569EB190FD9B3273204B628EAFEF67E1804
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photov_773221035263.lnk
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
photov_773221035263.lnk
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
videoa_146769914624.lnk
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target photov_773221035263.lnk
- Size 2KB
- SHA256 6fe8b3b61d25e0fd3d1e1038247e22acc9f032403d69202704ce4597c8e2cdcd
- MD5 ba98c8711200f521e20dc07247c3b7ee
- SHA1 259fb586e940a8cc78bf32794d99faf47a1bd63e
- SHA512 4331ff6364b5285db5a1d562d8d60dc229ebfc48b88069288a5259b20f8c5f59bc9981be3b940341c7d2fbf2e32494710e62c27e1399bfe6e8c18dce62236feb
- TLSH T1D751FE249BD60108FDF21E77E4BEE1C3F432B9977221E80A0852E18C94B37096122F6F
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_146769914624.mp4
- Size 1KB
- SHA256 b8d7bf3bcef6ea639ee928d0971c4679ae697bc2922d8cfd09e95d5835562804
- MD5 60ca762b18433516df0bc30b673a10fc
- SHA1 d28d398f155dc5d2713f17d90045bfe5a18a3285
- SHA512 5dc4257340cfdc9364e6a9c30e26169d220bbf2ff69033073f1cbf4f396d396cecc68876370cf172d19cfcc7ccc799a16a2f38d71ce90586a3c666bd36527be1
- TLSH T1C2312B3097DA8605F3B64E37BC7CE14CA2B9B0107D06D39C46C0A09978B2954E136F23
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)