General
- Target 31072026_0333_RAGEL-IDOGIDIHIT-OR.lnk.zip
- Size 4KB
- Sample260731-d37m2aam7x
- SHA256 7069bd71e13de9ffe5c2f24ac536ae5c67eb00b72954e16dea0f2ee9337c4638
- MD5 c0559e8531926f6156995f1fc5044070
- SHA1 51caeea460268d82c51e9addea3682f071957527
- SHA512 5c56476eef637d4d8484448bbafc67a8ade9ce358ba0c8946f035750fa8b3a3ed5e8d1367364af2421e509709817a00055dad79d90c8cf381e6d68c94e32e1c5
- SSDEEP 96:yXfyS1wkNGGSuqSsVA624uA4ifUd127Fp/uMkVqk:yXff/NGGSursZbJfUqaRVqk
- TLSH T139916D15B52E102AD8FE36FC64E4B3D6C418B2415072F141B22EF1C418DB4DBAAAD7E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
RAGEL-IDOGIDIHIT-OR.lnk
Resource
win10v2004-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
RAGEL-IDOGIDIHIT-OR.lnk
Resource
win11ltsc2024-20260709-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target RAGEL-IDOGIDIHIT-OR.lnk
- Size 9KB
- SHA256 46b07903ce8681aea5cbe285533c3cd51e42174401646d06e84d5cfe27ac89c9
- MD5 f96cd3814e9d81c9ca567bac6c77bca7
- SHA1 3111625cfeb11021938049fdf768af3c31c472d5
- SHA512 6e8e9d76a81fdcc77f91c30e9f155e9c1833721087714413a4c72f0bb6fe33a2347ee9cb6051cfb932f45c36a28a02b16c3ccee9c336abdcb135d5d3c702b3f1
- SSDEEP 192:8RYkoB2QKlrYs8Rwskcv1pSdZhaAU1Al7cTcPbPXbKCHta1:4Yk/QGrYHiskcz2v3rl7cOb/bKCS
- TLSH T1C2122C3434EA1019D573FB7B4FDEA9ABDFBAB222223B642E216147478601D01DE52739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.