General
- Target b4c56effba0516161bf59022f137837ccf852825e5fa09d15b9a8bf8295fbde2.bin
- Size 12KB
- Sample260702-knv41sey41
- SHA256 b4c56effba0516161bf59022f137837ccf852825e5fa09d15b9a8bf8295fbde2
Score
8/10
Malware Config
Targets
-
- Target NAKAZ_MO_perevirka_mayna.docx.lnk
- Size 6KB
- SHA256 9bd16130d297f639bab147186ce090becb05a1f0e85ee87a8aba3b557e170558
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deobfuscate/Decode Files or Information
Payload decoded via CertUtil.
-
- Target SPYSOK_mayna.docx.lnk
- Size 6KB
- SHA256 d58243d0a48590eda21876c8130ad984877f8287a159469bcdb5ba1232b46fc2
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deobfuscate/Decode Files or Information
Payload decoded via CertUtil.