General
- Target mal20241007-01.rar
- Size 710KB
- Sample241007-f76bwasdpf
- SHA256 c862578f76c396997aec18d367b6f0ce81a6e15b6e50e27858e0f3dea7a98d95
Score
8/10
Malware Config
Targets
-
- Target vTHGfiwMDeoOH5a.exe
- Size 785KB
- SHA256 cfad352d8c9e907269c76b22b73f7a9fa47c3782c99ec48598a310a35d3bdaac
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext