General
- Target 08082026_1627_08082026_IMG_049035928070.lnk.zip
- Size 1KB
- Sample260808-tx2slazhpf
- SHA256 639366cc117f1147498a54d59717d9ab19ba8ad5fb342fbec1ec6312ca4ca96d
- MD5 b18f6b692a147271d49a3ad3a4923f90
- SHA1 11ee4df8c6b1fc2664a4099ff5d6c2b7d72bc9c5
- SHA512 ba0f3725d823eb00a3a2ba2d6c184879d87dde22b1685e5e45b21366dad181992ca6ddaef525dd4a075bfcccae6b563d77d4d1f429da543b94b81633c7fdbe85
- TLSH T1F621F9A4EC4DC11FF46E4A3E151A701606F180324C05A839E7E7B6C523531D25BA7090
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
IMG_049035928070.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
IMG_049035928070.lnk
Resource
win11ltsc2024-20260710-en
7 signatures
300 seconds
Behavioral task
behavioral3
Sample
videoa_320017655939.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target IMG_049035928070.lnk
- Size 2KB
- SHA256 ac9d6a31ff594d159cc41d0bf68bcaa46001a82e6b8f42dd63b391ddf4bc07d3
- MD5 942a8e4cd8e1884413d9e881d9b0a9eb
- SHA1 e8e4eb041a8dead7cce51d339c8301bd24545d7f
- SHA512 d7d42544ac388e5ad4f216c9cb5f9861173413fb1d2b041724a6d8b260aad605bbe4a9d729e0630f78183bfe78fdb026fb2a2c1d89f00ce389dec2f2349df525
- TLSH T10C516E295BE50615FAF78F32E8BEA042B4317A1AB801DD490182521CD573719B666F3F
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_320017655939.mp4
- Size 1KB
- SHA256 974f230458617357aed10124173a81c14ec12baf70b963da8c622e6635d8994c
- MD5 26556bd5c4a93aeade782e47b9d56e55
- SHA1 5d874dc57b18dc0e0206f3b0229fa6d6de976992
- SHA512 1ae0ef23f79a5008b99836ee0d89063e8c21cc617b8e1b2b9f4f0e77d7f44f777085091e63e82b28918920f396c0486664a0233f985c1ca7cda911242d2644e0
- TLSH T186314F1427D94A15E7764E7AB8B9C24870BA7021BE02D35D4284A1EA61B2854F336F27
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)