General
- Target 14 EKİM 2024 HAFTALIK EKONOMİ BÜLTENİ.exe
- Size 523KB
- Sample241017-jcy6vs1dmp
- SHA256 b4be7f2484d838df9503c7864f809acbaead8a110cf42a4e6481a01b5f4f9485
Score
8/10
Malware Config
Targets
-
- Target 14 EKİM 2024 HAFTALIK EKONOMİ BÜLTENİ.exe
- Size 523KB
- SHA256 b4be7f2484d838df9503c7864f809acbaead8a110cf42a4e6481a01b5f4f9485
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v15
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1