General

  • Target
    13082026_0040_12082026_photov_337659773081.lnk.zip
  • Size 1KB
  • Sample260813-a1fvrayare
  • SHA256 463b80adb41b5b4b61d9dbf5090b33eda549f3ea5e58ecf979af82958306edd9
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      VID_863403929922.mp4
    • Size 1KB
    • SHA256 e41f656b3ba4e0265d87fcb7639245aa5d88b82a9d6cd69ad1bae187b4f6859a
    • MD5 SHA1 SHA512 TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops desktop.ini file(s)

    • Target
      photov_337659773081.lnk
    • Size 2KB
    • SHA256 a3bd3af53eb49d1399a10c2ae3ce511d7134576d057b6ffeab91891edd85e9dc
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks