General
- Target images_20260803_055545.zip
- Size 12KB
- Sample260803-qxtkfacm5s
- SHA256 c52ca617e0fcb89b20af642209f6880bcbfb9d0171ed5c51751346c54917409b
- MD5 9948e5d8970666998fbb03a18c829dcd
- SHA1 23d2bae5c6c7516bdcaddff2a8452b06a3112a33
- SHA512 971b21100cfdf677dcf49950cab7b9eb01abcfa247a7a8d8ecc019589a81bfa8b140373c03c001ebccf99d901f001d1ec2d5afa3ee15c3caca7884af924cc58b
- SSDEEP 384:2rq2/ZGS3gpyQrdHhesxqEH1tulrgIKBY:B2BGigoqdHgsqU0lkIKBY
- TLSH T12352E04B509FFA93DBCFC43E178A4BE141C1A067C0E3F76F76E01B9247628B29592062
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260802_182247.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260802_182247.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260802_182247.jpg.lnk
- Size 1KB
- SHA256 f2ce4dc0dafe90aba306ae10d58d9bf8e323386e2ae21354f7f371b31b39e42a
- MD5 bac066051864f6f206ff66c0db78df88
- SHA1 2769e186fc53b85a9c250df377ab8832042ec726
- SHA512 de9817ce4c1a3f738a29a8b66fc1c78e7ba4586a1a3f77d58ca4a8e75b215a84dba6ca9ce20d0d2b5e01b55b47f641873069a0959bbccc24e30b0f799fd7fd21
- TLSH T1F721F1254BF30379D5B78B755876631187317A0EDA49CFDF1280C2949564224F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.