General
- Target aeb3979764077ad1bdf235e9ba89c85ae8684a4d4e6428952ad246a603a67eea.zip
- Size 1020KB
- Sample260421-lxswpaft2x
- SHA256 aeb3979764077ad1bdf235e9ba89c85ae8684a4d4e6428952ad246a603a67eea
Score
8/10
Malware Config
Targets
-
- Target DOCUMENTS_9672636960.scr
- Size 1.1MB
- SHA256 2af9816b540cfa33d8d62d8d84d1881d3d3c4f250d92c9d046df3469458f56a5
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext