General
- Target tick_wins_setup_release_x64_8060.exe
- Size 21.3MB
- Sample260502-2amn6agv8s
- SHA256 3d0f17e1bc778583b1273aa2bcc6e8d2a830c677868a78b1f82b89f5fad115d4
Score
7/10
Malware Config
Targets
-
- Target tick_wins_setup_release_x64_8060.exe
- Size 21.3MB
- SHA256 3d0f17e1bc778583b1273aa2bcc6e8d2a830c677868a78b1f82b89f5fad115d4
Score7/10Drops startup file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.