General
- Target cb52d125958088d33628988dd76d190ff179f827c8d2a2790717bf6330f8d469.bin
- Size 111KB
- Sample260703-xe5cjsa12k
- SHA256 cb52d125958088d33628988dd76d190ff179f827c8d2a2790717bf6330f8d469
Score
8/10
Malware Config
Targets
-
- Target SOA 710484359.js
- Size 802KB
- SHA256 7ee1e6a26edcf903e7580b78cbdc71d4ff6d908237002e8e6940e03089a2e27d
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Registers new Windows logon scripts automatically executed at logon.
-
Accesses Microsoft Outlook profiles
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.