General
- Target fiyati_teklif 65TBI507_ ON-SAN Vakum san tic_ Siparişi jpeg docx .exe
- Size 737KB
- Sample250109-wla7lswpa1
- SHA256 1d35d406169afe6bed77759d2e8e03c858897a7e181e3a83bb013f16c91af4bd
Score
8/10
Malware Config
Targets
-
- Target fiyati_teklif 65TBI507_ ON-SAN Vakum san tic_ Siparişi jpeg docx .exe
- Size 737KB
- SHA256 1d35d406169afe6bed77759d2e8e03c858897a7e181e3a83bb013f16c91af4bd
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.