General

  • Target

    11d07b88ee816001d61b9c6d8596c1ab759b13855ad431e0457621eab3e1b12c

  • Size

    2KB

  • Sample

    241115-trgkgaxcqe

  • MD5

    60bdd2ab2a153df1d841552a6889acf0

  • SHA1

    3d1904f4d2b0f543a495ace3a0dd78e495058729

  • SHA256

    11d07b88ee816001d61b9c6d8596c1ab759b13855ad431e0457621eab3e1b12c

  • SHA512

    75b832d4c784451236bb305099f8c39c54b57b805b07955adda711e7e269bc2ea7f64cf43f21c87203e414b9f792573260794cbab3b56cc87f98a486a49aaac1

Score
8/10

Malware Config

Targets

    • Target

      11d07b88ee816001d61b9c6d8596c1ab759b13855ad431e0457621eab3e1b12c

    • Size

      2KB

    • MD5

      60bdd2ab2a153df1d841552a6889acf0

    • SHA1

      3d1904f4d2b0f543a495ace3a0dd78e495058729

    • SHA256

      11d07b88ee816001d61b9c6d8596c1ab759b13855ad431e0457621eab3e1b12c

    • SHA512

      75b832d4c784451236bb305099f8c39c54b57b805b07955adda711e7e269bc2ea7f64cf43f21c87203e414b9f792573260794cbab3b56cc87f98a486a49aaac1

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v15

Tasks