General
- Target 12082026_0052_11082026_DSC_968455344572.lnk.zip
- Size 1KB
- Sample260812-a8anpshg86
- SHA256 86196b05a00fcffe7482c06f65d5e5f64e409cb535efafb744430b6c2af5a494
- MD5 0e2ad33c0ac31d9ecae84dd0e6980ea7
- SHA1 44be6fa532cfb9cc2826f7bc69b8eb3d2914f39a
- SHA512 755624e92483e87e999e3c434e77f1e6221d269468f49c3d64fa7b5c89d09f2c66ef376efe2fc4aaf0c25fb3e4d0fb576ab81920d06a264829b88583500af707
- TLSH T1F921B9B6900FDC56D343977C546FFAA8722A2C30708D569F216E61D08E26931989E865
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
DSC_968455344572.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
DSC_968455344572.lnk
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
Behavioral task
behavioral3
Sample
videoa_616279765273.lnk
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target DSC_968455344572.lnk
- Size 2KB
- SHA256 8df966cb91b72eb72699f734574d6ddb22de2069cf86d1cb1fb18d69768998cc
- MD5 2fb6f95bf4368787ae8df7b0975bafaf
- SHA1 e00c2bcb3caa94c709c9f80e6287d9f112af608f
- SHA512 0fc42be0550e3c51b03af1d354028e553193b06ad86132615aad68ae14b99b7e8470e55fe17af01c76aa9f5b7fabd3814b707e67d94cf0dc40c30ba92ad59001
- TLSH T1B6510A14ABE94215F6F34F76E4BEA243B431BA39B903D9590141D18C9473609D17BB1F
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_616279765273.mp4
- Size 1KB
- SHA256 24968f750095a1e9ada474fe869efd3d0130d5cd29747a0d5895d1149f784afa
- MD5 7040d1790ed0cec84def5d1aa3444971
- SHA1 5bd77c04a0d7f455cfa0a52d8a7c045107f0d51c
- SHA512 3d5d6cbe852dcca634f45a152b4aca292a40e596a4f2dc5252ef82dc031a5fefa6438a616bdb92d034341ab8762e21d364ab406be57752b13a5332596b013458
- TLSH T10631DF2023C64B15E3F60E7ABC38918930B4B420AD12C26D0181A49864B2108E136F33
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)