General
- Target 23042026_1441_22042026_WhatsApp Image 2026-04-23 at 10.16.rar
- Size 90KB
- Sample260423-r2rr3sft2p
- SHA256 8acc9bb9e4c1a6b02deb9be330c9a932716b1f7d621ce544d6d40333ff4bad29
Score
8/10
Malware Config
Targets
-
- Target WhatsApp Image 2026-04-23 at 10.16.js
- Size 193KB
- SHA256 d8746ea25efc80ae0088dae481c1b923b44981cdc95c649981349f8895768176
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.