General
- Target KB_202607.zip
- Size 1KB
- Sample260729-ppc22swvgy
- SHA256 5ee6a58ac60ba069a5ca36fd8ea21e1a5f121a4d4765b5f8b92c0f09bfdaf7f5
- MD5 f8cf862acb10a8575a1ac781335605ec
- SHA1 de994413ec294312bc6e30cbdfeb8880ac46767a
- SHA512 c475a58ff0c1ead7bc17f8662d60d9eec8a061e25129b2f6429e7fdbdd556d16bc9fc17586190b7629bba05b0e819ec4acd46a9947e662cf065191f1a642a371
- TLSH T18121941816D76A60F18DADB37A175AA859CC2E4668192D8E229B94C830038861FE7D6B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
KB_202607.html.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
KB_202607.html.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://link24.kr/4xa2Mvj
Targets
-
- Target KB_202607.html.lnk
- Size 1KB
- SHA256 e9c42d5ab7c9903ce9e83ff53809a16e1113c2bd28023ba7702a0f77fce711c3
- MD5 8ad6549a7923ee1c73010ced4e64d168
- SHA1 8850d7c4dac203c023c24768b957415922fac3a1
- SHA512 524ba0c885024e09fe8f40b710071578a4bf4c107ea3d35e9432e0776828c95971358b27c6a4523a53c1a291063b05d428a3f8448225857c62a72178e366024b
- TLSH T16941110419F112BEF373CB7627F7B61AA521F4799B03099C51C252046E50608F876F7E
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.