General
- Target VID_20260917_220313.zip
- Size 12KB
- Sample260922-phw7caeb66
- SHA256 daaa674263e12e9fd528018532df90b21c37d58f44d6c64cfcacf60cde38a7cb
- MD5 31da73db93c3d071eb67d2e6c4ca80bd
- SHA1 78ca59ea6712dbe105f09a300a31ae984142c306
- SHA512 c4a18a995468cf1b158a76c09ec3f8181510d503a5f0e7e179348200c7a2924f055f93be5187398f90f8e18329e4a4966cd49f07ca5e2cea7d8e138207b66b8a
- SSDEEP 384:u8B/5tWG6Z9gGNx/FZ2DvPzUN/IscU/d281j:uq/5tWG6ZKk3MDPg/Z5
- TLSH T1B742C04A86662113DFD87075FE876A7A36E9D0CC935B0CD6E3D83B81ED08153890B62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260917_044020.png.lnk
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260917_044020.png.lnk
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260917_044020.png.lnk
- Size 1KB
- SHA256 30abf0f74236118cc418abd68181fb525cc21cf5f9d6274764f8d4990a79bd4c
- MD5 b7cf12dfc06b0f255d296282cf07d343
- SHA1 79915e23e7f01505077c9af343226cffc2b7742d
- SHA512 3f110e6f4aa9e8c04a986534123cee2c8ae68dabb2cf345c89818b85be9a17d0352f3835a544936416a9ffcd152ddc6250ba84f624f438b7b1a5b8b7966eae5f
- TLSH T15641AD111BF51718D2B78B3AACB6F2128732BD65ED124FDE428092895C64229E875F2F
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.