General
- Target photo_977297492379.zip
- Size 1KB
- Sample260812-an81rsssey
- SHA256 6d94ac24fe23760293970e7cef02c94eb3f23dbdef20d68254e9d5d6f065c66f
- MD5 43f4d1a7bae1f12fa240925c5b190514
- SHA1 0bf44e960e08f07e3f49f85f0e793916aa270299
- SHA512 dc4c2749605df61bf2e6b6364301980833488e1098f5cce2c4b303516258c24acebd0346cf9d41b0197b3b2b08d21586893528ba44e37cfc758da6229831e2b5
- TLSH T1E521C654DD1F7C22CC838130BA764E5C520A057C416E611F5232223716E63AECFBD50C
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
clip_718091690527.lnk
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
clip_718091690527.lnk
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
photo_977297492379.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
photo_977297492379.lnk
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target clip_718091690527.mp4
- Size 1KB
- SHA256 077aea099a93ea6f77c00c9b76b9a991cad0f3fa79ca971abbf6f6f966aed6d5
- MD5 afd88896f7e90bd6ecc6368af7fe9f88
- SHA1 a1c49977185f4954eb9878a31e69093f78caddcd
- SHA512 7be9e3b04dda4edf1c4fea6e3ac50a66a220fc421ac0d487d31e73c2524af0d5dcbfd635444a1c7c307753d5767ea853f89ac59c508d1ffa2b85c392f9c20097
- TLSH T1AD31D83057E64618E7B64E77BC7CD0863575B411AF02C75C4181E594A5B2548E176B33
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)
-
- Target photo_977297492379.lnk
- Size 2KB
- SHA256 edc026961493f50e142e9294197125928429633205c15c270bdf6b4e89069ec8
- MD5 4aa7957a09b02f7a84cfbc5b5f546d34
- SHA1 227c26850d34d649dad199a55a95aa9d392c1d4d
- SHA512 6ab0ef97ccb0451681d4b9aca5bbc8c4a55d1091e5bd61b7ca7e49ff1580e935a622c7f7a38de3bfcfda92fe94acbe74b850d206a183059c9bd6cd475c81f266
- TLSH T176517918EBE4022CF9B34B36F5FEE1027571F9697802EA890186565C8071588E8FB73B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.