General
- Target DediSpoofer.exe
- Size 15KB
- Sample260713-emsdvabx7m
- SHA256 4abee23099722bdecd2cfc31c35626cd9df49cbc6799e8e963838280ac139e95
Score
7/10
Malware Config
Targets
-
- Target DediSpoofer.exe
- Size 15KB
- SHA256 4abee23099722bdecd2cfc31c35626cd9df49cbc6799e8e963838280ac139e95
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.