General
- Target d2ed0533174db447c4c9f9b4f0d53e4a530f13d350f8675e53a1ab6c9705c668
- Size 1.1MB
- Sample260722-ftprzadm7s
- SHA256 d2ed0533174db447c4c9f9b4f0d53e4a530f13d350f8675e53a1ab6c9705c668
Score
7/10
Malware Config
Targets
-
- Target d2ed0533174db447c4c9f9b4f0d53e4a530f13d350f8675e53a1ab6c9705c668
- Size 1.1MB
- SHA256 d2ed0533174db447c4c9f9b4f0d53e4a530f13d350f8675e53a1ab6c9705c668
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1