General
- Target 085b0a9c99e7018692f0cd51fd7fe8c9f172cde55b9fea2d0258258c7077c26d
- Size 2.7MB
- Sample260721-mlcwrsc17k
- SHA256 085b0a9c99e7018692f0cd51fd7fe8c9f172cde55b9fea2d0258258c7077c26d
Score
7/10
Malware Config
Targets
-
- Target 085b0a9c99e7018692f0cd51fd7fe8c9f172cde55b9fea2d0258258c7077c26d
- Size 2.7MB
- SHA256 085b0a9c99e7018692f0cd51fd7fe8c9f172cde55b9fea2d0258258c7077c26d
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1