General
- Target AV.lnk
- Size 1KB
- Sample260910-gyzcms11gx
- SHA256 00401651af3194ede5157004b6dbe1edf836a94ca182221f2c034201fe55e4dc
- MD5 3a9349af006440c7e0da677724551239
- SHA1 70075bb3b999e825e328302b462deb1aa337b663
- SHA512 588d9ea0c7d770adf1be9c887ef2f2cdb42a7205d2dd1288cda193cd1d99eb689b5dc68765e17724f093ef312b7769290968610c4c6f2be0432d52d483ff15c0
- TLSH T13C41E2019FE70B3ED7264234AC76A251533B7555F8965F8D9040478404B3401916CF7F
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AV.lnk
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target AV.lnk
- Size 1KB
- SHA256 00401651af3194ede5157004b6dbe1edf836a94ca182221f2c034201fe55e4dc
- MD5 3a9349af006440c7e0da677724551239
- SHA1 70075bb3b999e825e328302b462deb1aa337b663
- SHA512 588d9ea0c7d770adf1be9c887ef2f2cdb42a7205d2dd1288cda193cd1d99eb689b5dc68765e17724f093ef312b7769290968610c4c6f2be0432d52d483ff15c0
- TLSH T13C41E2019FE70B3ED7264234AC76A251533B7555F8965F8D9040478404B3401916CF7F
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)