General
- Target 05092026_0346_04092026_���֧��ѧݧ��ߧѧ� �������ӧ֧��ܧ� �ߧ֧����ѧ��ߧ��� �����֧�����-���ѧܧ�����.lnk.zip
- Size 3KB
- Sample260905-ebyfqaszas
- SHA256 8df7dce42b68b47a42184ddf016fc3b5cd991dea5243c26b85f35b8d65c8aac2
- MD5 f6c1fd4bb198e978680ad0aeb416b27c
- SHA1 05d1fd0fb2c426b405311e271426d98c1a4729e4
- SHA512 82bc907b47a68794cde6958b42ab80e1e4a2c960f80b087e80f614f2c48b4af80f17a00e776cebf20b2795078908a1919937f1ca5a715290c37ffef2341a6d44
- TLSH T18081EBA07AED1B48F3B36EBBADB7A250487635B1FD21C76D0140598E2C02E04DC71F22
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Детальная проверка нештатных счетов-фактур.lnk
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
Детальная проверка нештатных счетов-фактур.lnk
Resource
win11ltsc2024-20260709-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target Детальная проверка нештатных счетов-фактур.lnk
- Size 3KB
- SHA256 ed0cf8a95fd0dcc655215edc6e9f120bf7de350bfccb476d5b7f3f6338cfde89
- MD5 f877643a7bf14754fa9141e739c000e0
- SHA1 347f93bcacdad9a6fd2d0a538d70248141a40c01
- SHA512 4dafd06c8c17dedd82477feb08c4f3de053c4dd27660d64e0a0d1622776def11ef3e7ae9a71d920e3a8d23917b7efb100aa80595313ce29c3c2ddfb462f06b0e
- TLSH T17F71BF607AE90708F3B36E3BA9BBA250487A76A1FC35DB6D0540998E1C52E04DD71F27
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.