Overview

overview

8

Static

static

1

VID_756891191193.lnk

windows10-2004-x64

7

VID_756891191193.lnk

windows11-ltsc_2024-x64

6

photo_3473...76.lnk

windows10-2004-x64

8

photo_3473...76.lnk

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    photo_347307540076.zip
  • Size 1KB
  • Sample260811-g1mrmaxfra
  • SHA256 8f1ad62851b249304aceab6ac0d9442998e2c386886f76a799108cef6ad5ca73
  • MD5 SHA1 SHA512 TLSH
Score
8/10
adwareexecutionspyware

Malware Config

Targets

    • Target
      VID_756891191193.mp4
    • Size 1KB
    • SHA256 2f4c0ffd2dabda88d682d5a0e830038f08cf7aca6ec454347a6873d47f84463c
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    adwareexecutionspyware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops desktop.ini file(s)

    behavioral1behavioral2
    • Target
      photo_347307540076.lnk
    • Size 2KB
    • SHA256 1c067dc11c30b884303552518859f063e55bdc6908d71acf4a216720a717e269
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    execution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks