General
- Target Photo.lnk
- Size 1KB
- Sample260930-psg56sybkh
- SHA256 6c143930a3c3b82e7ac25412fd74dc376cad1db9ff66ae25cd95da7f0a32da4d
- MD5 8a202b827f009582d347dd6dfe98aee4
- SHA1 e73ca800370b17faaa45d9821391622c1f680518
- SHA512 187bf8083b0ac338fca26a37c4ccefd2d4e53872fdb7e043cb9195a4007e7a78616c2723c47a8443bf603ef26d5fd127be24a3ebb0fbceb0c1046f93083cc937
- TLSH T18841E2019FE74B3ED7264234AC76A241533B7555F4965F8D9040478404B3001956CF7F
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Photo.lnk
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Photo.lnk
- Size 1KB
- SHA256 6c143930a3c3b82e7ac25412fd74dc376cad1db9ff66ae25cd95da7f0a32da4d
- MD5 8a202b827f009582d347dd6dfe98aee4
- SHA1 e73ca800370b17faaa45d9821391622c1f680518
- SHA512 187bf8083b0ac338fca26a37c4ccefd2d4e53872fdb7e043cb9195a4007e7a78616c2723c47a8443bf603ef26d5fd127be24a3ebb0fbceb0c1046f93083cc937
- TLSH T18841E2019FE74B3ED7264234AC76A241533B7555F4965F8D9040478404B3001956CF7F
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)