General
- Target bada9a791056f160545710e6170019870e25d2136914ff604662f046bf0e3764
- Size 3.2MB
- Sample260604-z2fc2sft3z
- SHA256 bada9a791056f160545710e6170019870e25d2136914ff604662f046bf0e3764
Score
8/10
Malware Config
Targets
-
- Target bada9a791056f160545710e6170019870e25d2136914ff604662f046bf0e3764
- Size 3.2MB
- SHA256 bada9a791056f160545710e6170019870e25d2136914ff604662f046bf0e3764
Score8/10Modifies Windows Firewall
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Impair Defenses
1Disable or Modify System Firewall
1