MALICIOUS — IMG_20260728_062257.jpg.lnk
Verdict: malicious (89/100) · Family: GenericKD
File type: lnk · SHA-256: 1c12c2ab448b245f1dee93703455ffd83f8a816381e6cc5af2afe5776e2d03f5
MITRE ATT&CK
- T1543.003
- T1112
YARA
Dynamic analysis (windows)
29911 behavior events · 2 ATT&CK techniques · 3 dropped files.
Runtime network
- onedsblobvmssprdcus02.centralus.cloudapp.azure.com
- searchapp.bundleassets.example
- www.msftconnecttest.com
- svc.ms-acdc-teams.office.com
- mr-b01.tm-azurefd.net
- onedsblobvmssprdcus04.centralus.cloudapp.azure.com
- onedscolprdeus03.eastus.cloudapp.azure.com
- onedscolprdcus70.centralus.cloudapp.azure.com
- onedscolprdaus52.australiasoutheast.cloudapp.azure.com
- onedscolprdweu12.westeurope.cloudapp.azure.com
- onedsblobvmssprdwus04.westus.cloudapp.azure.com
- onedscolprduks01.uksouth.cloudapp.azure.com
- onedscolprdgwc04.germanywestcentral.cloudapp.azure.com
- onedscolprdwus61.westus.cloudapp.azure.com
- onedscolprdeus20.eastus.cloudapp.azure.com
- onedscolprdeus10.eastus.cloudapp.azure.com
- settings-prod-eus-1-tagged.eastus.cloudapp.azure.com
- onedscolprdcus01.centralus.cloudapp.azure.com
- settings-prod-sea-2-tagged.southeastasia.cloudapp.azure.com
- bg.microsoft.map.fastly.net
Analyzed on MalwareAnalyzer by Cyble · Open interactive report