General

  • Target
    SHUYOU 新指令 PO2301010 01072024.exe
  • Size 877KB
  • Sample240701-l5m1eaydrp
  • SHA256 bf8c949142a94cd782ccaa81fdcda4e35b3864a1907c5be0c6665a7eb9b54cd4
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Targets

    • Target
      SHUYOU 新指令 PO2301010 01072024.exe
    • Size 877KB
    • SHA256 bf8c949142a94cd782ccaa81fdcda4e35b3864a1907c5be0c6665a7eb9b54cd4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks