General
- Target 9fdd7b9f82e6b6065763fcbdd26b49830fb5499008bf3fc2e0c6c1b4411ffc6f
- Size 414KB
- Sample261027-mktswszz6j
- SHA256 9fdd7b9f82e6b6065763fcbdd26b49830fb5499008bf3fc2e0c6c1b4411ffc6f
- MD5 b02af0a79a8856632d0adb0301dbdda6
- SHA1 8b5744928919000c438495bc26db16322d7cc2fa
- SHA512 eb3c601becd357086f1682ade22d100c55bf675af0283e1e1142061280f57c14d6d2643c87bd4296df5fec7a70b76146af892d26ecfae97841e1a31c0dbf7365
- SSDEEP 12288:iJfpSslj0PAv19ZmMPs1VydfqS+elL13PONB4V:iJf3w4dbmmsmdCnelB3cO
- TLSH T14C94239582412243F1217CBB4B6FE0D59953F473A6A2064A2347BAF7F17F136D70A0AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Product_Detail_Comparison.png.lnk
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Product_Detail_Comparison.png.lnk
- Size 2KB
- SHA256 08c18c9002b39e320f148c68f975bca450f1f6b830d56d95a76415b2795aef52
- MD5 3b468c2485036710d7d4041bc2c557de
- SHA1 f2fe48451604631895cb11eaa09698b80bb1be54
- SHA512 68798b1c9a2c3ece72b128b6873f27d7c64a59a4843912860ede8172b1d2d3211ba540d792a5a3fb4390413aaaba890da3415a69877438119b500597dbc2f551
- TLSH T11241E03C1A8D6758D7B18F37C0A9B3178720B816FA52AF6905D0A6CC1C00721BA75F2D
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.