General
- Target 09082026_0134_08082026_photo_314571385639.lnk.zip
- Size 1KB
- Sample260809-bzcmdafr2v
- SHA256 977ed99c635a63d80a7eebc59cf8f8d63cb0918ceb98b2dd145de8669ce8c4b8
- MD5 36522f25cedfcf2643cca4fec7c055bb
- SHA1 07595b4f7f3c7d565f3664cd833c5fede8b26df5
- SHA512 96c34c99eb81209f9cc23dcb405576a9d687346318dec867281fb51bc19481d3b37f9de8e1d8e5b0fd22dc8b1adc408fbeeb52eb3717144c20506389a88dfda4
- TLSH T1F5218682C45D8301CA5753363C565A556D7E3B03243EAADF3C66E3D30E834D09ED2D4A
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photo_314571385639.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
photo_314571385639.lnk
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
Behavioral task
behavioral3
Sample
videoa_242179533022.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target photo_314571385639.lnk
- Size 2KB
- SHA256 5c202cd93731fe1f81e889517f9ef7fdc6a488cfa778fcdd1bcc71be85c32bc4
- MD5 7cca93c7499fe9cb5896fc52fce0c277
- SHA1 397cbd387adc377189994ab43e31fb5165d04094
- SHA512 6d861577ead333353c0fd21203f827baf5f9a0e8bde705100bdb844a18ef78e6479574d537a1ed79ed533c7d88ba770890c129cb908dd0f80d9ebac9dc534a2a
- TLSH T1DE51FE296BB40515FAF38F36E4BAE1027473796AB806D9891184E14C9472509F4F772B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_242179533022.mp4
- Size 1KB
- SHA256 053c8fe03936cb5944a6d7e6dd09c288311d032edcfa6a415360fb250f7b6650
- MD5 b9185aa80cc25e96e5860cd8f5b9b01e
- SHA1 a6c615a0c8602f5e76b982e037e04fafa14e5ab9
- SHA512 1f0f548950fd24d95e8185cdb0474d47c3614fbb84844f7866b8f455a7a8716f2aed0d6d05eb229d557e41999be1ff17637a598189901b6440ce89425ea490d6
- TLSH T14431262127C60708F3F50E77BC3CD1893065B8108D02826C40C2A5F869B6104E43AF33
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)