General
- Target =XUTF-8XQXyeni_sipari=C5=9F=2Er00X=
- Size 558KB
- Sample241107-p1fmbavmfj
- SHA256 7e1381c64bd9b22722685486aede77240202f163ff0264196da0940d1554bc93
Score
8/10
Malware Config
Targets
-
- Target =XUTF-8XQXyeni_sipari=C5=9F=2Er00X=
- Size 558KB
- SHA256 7e1381c64bd9b22722685486aede77240202f163ff0264196da0940d1554bc93
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL