General
- Target 12082026_1215_11082026_Security_20260811.lnk.zip
- Size 81KB
- Sample260812-pe99ssfr81
- SHA256 f4f6312963aa1dee1bb321b6af178c169a11736fdf8b23d5deca0b4de66c18e6
- MD5 9955eb0c77df7d0a66f3c89875a4e27d
- SHA1 3403f2924b8b3f64a03a06da823597e27345d803
- SHA512 928463fee1f8c9e95bdeaf08157f89f5c8265ed0e3ba81cecf3e86e37dc08380c62567290aebf9a701bfb88fefc2571cabada1e255a8880543210ce6310293fc
- SSDEEP 1536:jmF1dcShHARfWVLMvqCv/qnVzkzMsavnucKjPPK:jI1d1hgR+UXAVaMtnucKjHK
- TLSH T10883D98B234BE51FF76F9486737A7BE8C328934415670C701AA57CBE8FAB64056492CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Security_20260811.lnk
Resource
win10v2004-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
Security_20260811.lnk
Resource
win11ltsc2024-20260709-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target Security_20260811.lnk
- Size 8.5MB
- SHA256 852cce9bc86aaa36c9ceaf16517dfb07a46246f7c047ed8305b1278444f72837
- MD5 ce5932b88f879f26006df81f2fa7667e
- SHA1 3d4867e2c63e62b5102ccba44920ccef79c619e4
- SHA512 c78a5a3aebbe116e80402b5782d9d321054e68adc4743614579838ef156791fe82edfb19a991c7447c5a4a4eaa5d908d7e6eb41fbb83506d75eddebeb903b387
- SSDEEP 1536:WYkrr0AaJMumUHkfuP+H+H+H+H+H+H+H+H+H+H+H+H+H+H+H+H+H+H+H+H+H+H+f:WYkrr0AaJMumUHkfuq
- TLSH T13296AC2839CE944CC683AE1BE617F500DF8097DB13472CA21D557B90762BBB69CB742E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.