General

  • Target
    photov_709235722792.zip
  • Size 1KB
  • Sample260729-nvgrragb54
  • SHA256 cf4542d34db7c9156ae66d879818783058d3bb5bd6c4b004c6f7d4cbcec8e707
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      photov_709235722792.lnk
    • Size 2KB
    • SHA256 40ad9a4a0f3e43364c993c3acc52aab7a01f80bcf13f0cbcd0da18e3d7daac43
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      videoa_941274307422.mp4
    • Size 1KB
    • SHA256 37023df91838e4d455d8d091a7b7483837c0d7dc13ab0868ae30c7d8f2703eae
    • MD5 SHA1 SHA512 TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks