General
- Target 09082026_0135_08082026_photo_963083711601.lnk.zip
- Size 1KB
- Sample260809-bzsnla1zat
- SHA256 6b564abf65a710b84c5f152adddf1aa19d853dd8198a521bcff0228cf8737289
- MD5 7d801a398341334dfeea80e6b1d50535
- SHA1 41ec776f266c71a97c292e8030af0336009871e8
- SHA512 c58e9c1fb32854c5dfc3630df318ade8e2ff0ee084626d8d48bd21301047de91be2eea0a061ad2db16ffaa8485d63a6e525a3c4d7d535ded885fc6c97aa9df96
- TLSH T1022196A301770896C49185B13E113E5738F50BB05A2DF2C65E0769B519FD7F88BA0E71
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
photo_963083711601.lnk
Resource
win10v2004-20260513-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
photo_963083711601.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
300 seconds
Behavioral task
behavioral3
Sample
videoa_910967470075.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target photo_963083711601.lnk
- Size 2KB
- SHA256 7b770226b565ce9d0c41466610f790349356d6ba5472f6c8790e4dd42bd403f9
- MD5 f7a2ccb669d96254660ea9287a54b359
- SHA1 65d8e7256f475b1cf8500aebb12ecacd10dfd9f8
- SHA512 5b8f5617c0415741ca92a9d5c88c8156b29a6c225e8744041830159e0825d276c5d5bd382144bad5acefe38838e506955cdf2ef6225b21b47dad76be4dc0e022
- TLSH T1B6513B2867E50118F5F68E32D9FFB14374797E6AD802ED4C15C1A14C88B3609F0A6A3E
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_910967470075.mp4
- Size 1KB
- SHA256 1d9e4a7433cea48e7e0ae7e4fcd003c41d40274e1bec60a5cbb8b7a9193ae2c4
- MD5 90b352e049bc1cfdc9870680d53d555b
- SHA1 490ee04d66a1ac5f22ca169563cf3e9fb4084a6e
- SHA512 617f8476a7434e5b914cd0edd3b042955c071deae52e34f9befc705ceeafca843ad52edcc1aaea144892cb237e0b9b1610ddf6f9dedaf1bbb43160bced8d2014
- TLSH T1EF314F2167CA4A15F3B64E7BBC7CD18931B5B814AE06C29C4681A59464B2548E47AE33
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)