Overview

overview

10

Static

static

ebadd662bb...5c.lnk

windows7-x64

10

ebadd662bb...5c.lnk

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ebadd662bb797b5077e24638de04a1554e19a56362d8fabe1ea6b6903491c95c.lnk
  • Size 1KB
  • Sample220901-m6axxacffn
  • SHA256 ebadd662bb797b5077e24638de04a1554e19a56362d8fabe1ea6b6903491c95c
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Language

  • hta

Source
URLs
  • hta.dropper

    https://doc.documentshare.info/DmJMFYpwLPP3ygS/NpPZkEHpGlDQb8izXVjfft1YnEM=

Targets

    • Target
      ebadd662bb797b5077e24638de04a1554e19a56362d8fabe1ea6b6903491c95c.lnk
    • Size 1KB
    • SHA256 ebadd662bb797b5077e24638de04a1554e19a56362d8fabe1ea6b6903491c95c
    • MD5 SHA1 SHA512
    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks