General
- Target PO250116 - および購入契約- Offer Z01G-00008D SUPPLY - H64PO_2403.exe
- Size 790KB
- Sample250325-dj7tpatls7
- SHA256 c1cce554b441e0d7782fa5755f6d924238855f0b0dcb00c49eaa7a884b007a8b
Score
8/10
Malware Config
Targets
-
- Target PO250116 - および購入契約- Offer Z01G-00008D SUPPLY - H64PO_2403.exe
- Size 790KB
- SHA256 c1cce554b441e0d7782fa5755f6d924238855f0b0dcb00c49eaa7a884b007a8b
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.