General
- Target photov_709235722792.zip
- Size 1KB
- Sample260729-nvgrragb54
- SHA256 cf4542d34db7c9156ae66d879818783058d3bb5bd6c4b004c6f7d4cbcec8e707
- MD5 1ed2f3cb19cd580e22f96d59b4097592
- SHA1 f29ff5a719ff836eabf350ba6bd9d3b0f390167a
- SHA512 3916294450819792310381a0d99c0e87ac930e3495d325f990144456da77379287f66d9312f0d73a34400d849ce1568307c9f20e390bc13cb7703f92ef349ca1
- TLSH T13021D590829C86ADC01FD571F821FC05213908AC501FC7E7927AE5B15F17F9A23986E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photov_709235722792.lnk
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
photov_709235722792.lnk
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
videoa_941274307422.lnk
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target photov_709235722792.lnk
- Size 2KB
- SHA256 40ad9a4a0f3e43364c993c3acc52aab7a01f80bcf13f0cbcd0da18e3d7daac43
- MD5 5d690994d505eafbf61850002a19eed5
- SHA1 73f7d436ebcadebcd0706f73ae7f7fcf5b61e4a2
- SHA512 fd0fa31c23e0aa0d99b6a5c510e3e970c1f0b7bd4dbfd8d74f861a9d21ab50736b7bbe54daea8d249ba3076d9cab65f438b2c8b373b45c82fd60228d595f36f8
- TLSH T1E35125649BDA000CF8FA4A32FCBA9046F470B4E5B923D98C0562524C98B3A04A4A773F
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_941274307422.mp4
- Size 1KB
- SHA256 37023df91838e4d455d8d091a7b7483837c0d7dc13ab0868ae30c7d8f2703eae
- MD5 ebf4df7acaa4984d6e354eca2b18069f
- SHA1 2d95252cf72b1f2b0c59345bb3ab620945621a0f
- SHA512 bdcdca0401c270ab8064704380124e932c2edbe3b66b12e3dfa8b257c07fd75b2b25b6cdc0792e4fa5a85fae2828dd119e552d232314a58f9e64213fed435576
- TLSH T161419E6153D58A58FB7A4E7B7C3CD1482075F4206D02D39C1944916925B2814E13BF53
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)