General
- Target 07082026_0812_04082026_Visa5499.lnk.zip
- Size 5KB
- Sample260807-j3524atth1
- SHA256 ece567c8aa2c8e34ad3a0d751aa1441f6c8dbd58234ce450940954085d223491
Score
8/10
Malware Config
Targets
-
- Target Visa5499.lnk
- Size 312KB
- SHA256 50c8382e99cda7de463ede54f78b4ba05964f3890fe41bb4e8dafa05a3e8e2be
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.