General

  • Target
    video707.mp3.7z
  • Size 987B
  • Sample260624-vcsjvsdw9t
  • SHA256 436b37ea9b83fedb44229f457f96057d9dd77b89306f930daaee392a13a41eff
  • MD5 SHA1 SHA512 TLSH
Score
8/10

Malware Config

Targets

    • Target
      video707.mp3.lnk
    • Size 1KB
    • SHA256 05d65ff32d38f42e9e63cf556e71f60dad33db3e51987905fc8dbf181f365b74
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks