General

  • Target
    Line-GMUWR9.zip
  • Size 1KB
  • Sample260709-pfj41aa13w
  • SHA256 5c0fd1aed1aef582eec09f2d827821f6b8265ad2bc2f50bc48eda8fbeadd1404
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      Line-GMUWR9.hta
    • Size 3KB
    • SHA256 e482eee2fd7cf15e77c27b398224fa9a8d7b9f09967a765d34c84dfe4dc33a06
    • MD5 SHA1 SHA512 TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks