General
- Target lidan.exe
- Size 124KB
- Sample220705-rmt9naaaen
- SHA256 97ead2057976cc989c024fa9ad761549fa57e53b16ca38aeecf3aa70da77c0ea
Score
10/10
Malware Config
Targets
-
- Target lidan.exe
- Size 124KB
- SHA256 97ead2057976cc989c024fa9ad761549fa57e53b16ca38aeecf3aa70da77c0ea
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.