General
- Target b11fa73625d6cba3dd6cf98467aea533.exe
- Size 419KB
- Sample220115-khlcmadggr
- SHA256 d9cdd267e3c00ae4f70e60a45aa03f22b1a59b42526a692d0e5bde6b5f1b99d4
Score
10/10
Malware Config
Targets
-
- Target b11fa73625d6cba3dd6cf98467aea533.exe
- Size 419KB
- SHA256 d9cdd267e3c00ae4f70e60a45aa03f22b1a59b42526a692d0e5bde6b5f1b99d4
Score10/10OnlyLogger
A tiny loader that uses IPLogger to get its payload.
Suspicious use of NtCreateProcessExOtherParentProcess
OnlyLogger Payload
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself