General
- Target ghost_crypter.bat
- Size 307B
- Sample260416-cs3qnahw51
- SHA256 8dc2e3a962d5570a294eef6cc64a61e82876f730cc8d84f362e1f4101bb630ff
Score
8/10
Malware Config
Targets
-
- Target ghost_crypter.bat
- Size 307B
- SHA256 8dc2e3a962d5570a294eef6cc64a61e82876f730cc8d84f362e1f4101bb630ff
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.