General
- Target 08082026_1615_08082026_IMG_278941541661.lnk.zip
- Size 1KB
- Sample260808-tqd3ysed29
- SHA256 f2ac3e4391ede97fd3f88b964177ab6105d97151aacc628aeb90b8f53fa0fab1
- MD5 765a70033050318a5a9acc10b7d71b9e
- SHA1 d826f9608dbdb58c7520ebe14ba392593e012f18
- SHA512 a124532d841ff00d2ebbc7204b276e10bbb3b0f6ee394def9788ea0a5e96846b0c4511b3dfe2c56358fc30d3c933e67c5b5318469c7fac4e4f8a7bd2a2ac205f
- TLSH T1DD21B60FC5CE4457CE4B737029032CF83409148286D42A13427D32C84A03FA9F552A53
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
IMG_278941541661.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
IMG_278941541661.lnk
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
Behavioral task
behavioral3
Sample
VID_398646246045.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target IMG_278941541661.lnk
- Size 2KB
- SHA256 cc4223d7166062652844dff98f5454ca1eca7f98b486deaa63a524a54417c3c0
- MD5 29c3d1ffc41c2486d19086e0e84cee20
- SHA1 5a13e8da27032c11aa52a2d8923ccec33d680510
- SHA512 609fee14c3a9a7adbbaca92a5a6d4df27e846e52c5ae5ac489e1b44d85cebfcd369c6c0703ed1e86e38756dace06b9f972161971f0ec2643e21f108eed1dc3f3
- TLSH T1795120586FD50118F9F34F37E9BEF2417436BE3AA511F98D4182914C54B360A982673B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target VID_398646246045.mp4
- Size 1KB
- SHA256 c0564ed0edf1c55cad4809cde4f30841517e8e1baa55f22261d7d47cfb78ee05
- MD5 baa5d2281138509ec81337a06fa8f625
- SHA1 23a6b3607caf71a453830f3d8e6441d46cbb12c8
- SHA512 c80f7ff30f7ab9f2570ca6a681f48c7c363b44f2ef3581cf2c43cce923e124ab0daeff0e86627c9677503b665f6bc36b3662f17ccb9e3313dd29c28823aa3aa3
- TLSH T1E731261027C60E04F3B50D36BC38824830757401ED02866C0081A09464B6948E536E32
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)