General
- Target 23102026_1618_22102026_UmVxlMGe.lnk.zip
- Size 1KB
- Sample261023-tr73estt7p
- SHA256 f3ea656bea05acf237ddb9ec390f5ef8269cd410818d9af6dda1a53fc80dad0a
- MD5 e3138c2afa668aaa69ad8760ec9de118
- SHA1 cc01154ba76d6701b17936aa05e23a2eab5b4b9e
- SHA512 cacbb8e551c7ca37359f43aaacbdf3e7dcf9c99b830adc5ccb3a52d735b629c57b8db3909e2ca98d8b3dfdfc6eea8796eff61e0495f7e53d340fce3e284ed212
- TLSH T1B121C6485F16809CDB2023B88CE4523B6CA20F118186932C59ED05880F5773ECC99AA8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
UmVxlMGe.lnk
Resource
win10v2004-20260911-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
UmVxlMGe.lnk
Resource
win11ltsc2024-20260911-en
6 signatures
300 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://seusite.com/arquivo.zip
Targets
-
- Target UmVxlMGe.lnk
- Size 3KB
- SHA256 93c578bc58a421efe86c4c5533cd65b4c71364f5df3000cbd66fa936026ec12f
- MD5 e66f1d3e502e1a20727363d4d6f498ac
- SHA1 0df6931ce586f81b8ef106c6450ea6c0a25125c2
- SHA512 085b65145e5fd87b37363216a8aebd5b65f5da418275ae5a99e98a7f1d2f2a8fe0ead66402df3d0e49dbd9e65318b4e8b5c41bae54e83948139d9a5c7e925c16
- TLSH T15361D50063E94708F7F35B75A9BA61118D7B7C1ADD328E6D0108548E1BB7E10E966F37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.