General
- Target images_20260909_060742.zip
- Size 27KB
- Sample260910-e6m88sxglh
- SHA256 1b7db08d55fd1d7f6c1cc9a7ebdfca8a15316b277372fa848626be8e56a70e7f
- MD5 7986bdc3f245ca0bde6d317de4a895c4
- SHA1 4bb2f4ca44401baa77780f824aa6def46a9bd261
- SHA512 c7c2a957af508c07b33d9231bfb94e7047f69d4ca1b0feb6194890c85cae8318869b125d381e162ce852d00b67034412b34559feeef4a0b799cbce229173a464
- SSDEEP 768:agpbhK44NBdBEEiDK+DKFQR3ylG67PvB2ybPa26SIojN:aobo44pBE19DYntPvAybzN
- TLSH T116D2E1131A602ED7B0DBA677C9768A3C2E125375F691870D52BCE00F6F8F96C498A385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260908_075537.jpg.lnk
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260908_075537.jpg.lnk
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
ps1.dropper
https://dtxsysg.com/?e=v
Targets
-
- Target IMG_20260908_075537.jpg.lnk
- Size 1KB
- SHA256 324e612220df1f9786420e288b92abcc04cea9bb4166ef033228d977e34412fd
- MD5 18c60bc9dd783b5ed3d86c248a60dcb3
- SHA1 a9be70799072dc4fb3e54ed5e510eed338249e8e
- SHA512 c823d26fe18d84154de8d348905f6a1ab95f11b0624fae692118e9168047f81636459729f6e5beebd1f71ab43fa7887f4efdc08f2f7cdb715154d5b2721c10c8
- TLSH T1B8416D6447F54748F9B64A3D6C7AB2119572BA0CDE1987CD1290E5088C6032CE978F3F
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.