General

  • Target
    tmpqva60krw
  • Size 3KB
  • Sample260601-qfhrlsfs7m
  • SHA256 e49192673cef8408ccb035343697a6109fd2cc128f2818744b1dffb72b846468
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      tmpqva60krw
    • Size 3KB
    • SHA256 e49192673cef8408ccb035343697a6109fd2cc128f2818744b1dffb72b846468
    • MD5 SHA1 SHA512 TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks