General
- Target 776aac4718d53e0b67ea8218aaededefea9961e8c574c4bcfdbcec36eef487de
- Size 161KB
- Sample260601-phbkmsdv5l
- SHA256 776aac4718d53e0b67ea8218aaededefea9961e8c574c4bcfdbcec36eef487de
Score
7/10
Malware Config
Targets
-
- Target Զȵ/wifi.bat
- Size 140B
- SHA256 780f60956ba79b45538b44287d5ae5eb1486b9c95b0fc527f04d0e00248d9e63
Score6/10-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
- Target Զȵ/wifi.exe
- Size 333KB
- SHA256 2bc85e540a631cf84d9ca8265ffbd41512568315e45bd7d9faa54c38b6e8b82f
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
- Target Զȵ/wifi.ps1
- Size 1KB
- SHA256 7b5af2d5ca180084f19168480f8b1bb54f3502cd7f12ee2fade1d3a163c21153
Score3/10 -
- Target Զȵ/÷exeʧЧʱ.cmd
- Size 335B
- SHA256 5fc403ea3b11d9ead9c9c81c11cf3839a451c323a04604122ca2642965cc2f42
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
- Target Զȵ/ڿӻ.cmd
- Size 194B
- SHA256 7f3e8d35304fd0a307ebfc0a08960b923ef208a8466b70ff817aa391703075ab
Score6/10-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.