General
- Target 20062026_1018_NAKAZ_MO_perevirka_mayna.docx.lnk.zip
- Size 12KB
- Sample260620-mb9sraet4j
- SHA256 f304a0e7382b34bb3e60e470982356f74b928c9de3c6faf8968dc738fe753b99
Score
8/10
Malware Config
Targets
-
- Target NAKAZ_MO_perevirka_mayna.docx.lnk
- Size 6KB
- SHA256 4bde0e63d4cd3a71bf8ee280aeaef7602eb7aa4211b272cf0d065d2d7e2b9c5a
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target SPYSOK_mayna.docx.lnk
- Size 6KB
- SHA256 1921b0dc8b556ac47d7d6986df949d06611f9ae2b2a8697db03af495772931b2
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.