General

  • Target
    27102026_1549_26102026_Notificacion_Ultima_Instancia_Ref_27285539469768-84566587973995495844.lnk.zip
  • Size 1KB
  • Sample261027-s9b72asy2k
  • SHA256 dcb370ec96e4f9c930fe0f2ea6bfa34ff6614d07f132b143e9cf19fa972d40fa
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      Notificacion_Ultima_Instancia_Ref_27285539469768-84566587973995495844.lnk
    • Size 2KB
    • SHA256 038b6e171c6b01fb38d45f38fe7124544e0caf0f0ce71c54ce1c8e5d4ccdf901
    • MD5 SHA1 SHA512 TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deobfuscate/Decode Files or Information

      Payload decoded via CertUtil.

MITRE ATT&CK Enterprise v16

Tasks