General
- Target Store ID FH3H38472J9DJ4.txt.lnk
- Size 2KB
- Sample260805-j7eeyaysa1
- SHA256 99158b6292e3e4d785e0351b8c5f75a742d1439570a4058ad74e6179d8d8c8d3
- MD5 09e954b7c78e91fd319a5083e1ed1444
- SHA1 c35047c5cf489d9f79199f0dc3fa0e0ab9dae1a6
- SHA512 f069026e4547f7766bca04ad58c4b4b9fe34b83ffb511f3a8726797e408527f55746bbe897ed0b31482b7009d4755183af1836dc3ab92ced7b1525a5b2c91de0
- TLSH T1CD41631C634D63B2E3F34A33469DB320CB62BC03A992AF5B25E4028D5C03600BE24D6D
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Store ID FH3H38472J9DJ4.txt.lnk
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Store ID FH3H38472J9DJ4.txt.lnk
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Store ID FH3H38472J9DJ4.txt.lnk
- Size 2KB
- SHA256 99158b6292e3e4d785e0351b8c5f75a742d1439570a4058ad74e6179d8d8c8d3
- MD5 09e954b7c78e91fd319a5083e1ed1444
- SHA1 c35047c5cf489d9f79199f0dc3fa0e0ab9dae1a6
- SHA512 f069026e4547f7766bca04ad58c4b4b9fe34b83ffb511f3a8726797e408527f55746bbe897ed0b31482b7009d4755183af1836dc3ab92ced7b1525a5b2c91de0
- TLSH T1CD41631C634D63B2E3F34A33469DB320CB62BC03A992AF5B25E4028D5C03600BE24D6D
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.