General
- Target photos-5455117028601.zip
- Size 642B
- Sample260707-pgm72shw71
- SHA256 e37b38a07211c4c9876c4055f33be5d7fecb99407acccfbe737a664de430320b
Score
8/10
Malware Config
Targets
-
- Target photo-5455117028601.lnk
- Size 1KB
- SHA256 b8e17e7cfe116fe7e755a3113895c59e55353ba6778e79238f991421f669347e
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
- Target video-5455117028601.mp4
- Size 914B
- SHA256 7d61b4992ddf55e1448dcd5a031f854ec88b8bc889b318c361d0b22b76d2de15
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)