General
-
Target
https://download2297.mediafire.com/aavzf5soenggHFmU1GXDkCuVOtpNr75ay2_Cw6spPGmuENVBMpTmjUKXBXC1AHmiXkCkzyWpfB4Qs04YOtvqSzvw2twZAIrhQXz0S1VuIvZWQLy0dlopyE-NLxT4Cs5ba1P19Z4Jd3RKWmmvhTFBXF3umbTgJoN78OmHoEHb8fQs3Q/2husfhf5bmoxbm8/Undertale.rar
-
Sample
241120-wkhkaszrf1
Score
8/10
Malware Config
Targets
-
-
Target
https://download2297.mediafire.com/aavzf5soenggHFmU1GXDkCuVOtpNr75ay2_Cw6spPGmuENVBMpTmjUKXBXC1AHmiXkCkzyWpfB4Qs04YOtvqSzvw2twZAIrhQXz0S1VuIvZWQLy0dlopyE-NLxT4Cs5ba1P19Z4Jd3RKWmmvhTFBXF3umbTgJoN78OmHoEHb8fQs3Q/2husfhf5bmoxbm8/Undertale.rar
Score8/10-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-