General
- Target photov_410469450160.zip
- Size 1KB
- Sample260727-g1clnahe29
- SHA256 9d5014af310fed41ad51e46d8ef0948515a7742c84b50fde24d23493c291cea5
Score
8/10
Malware Config
Targets
-
- Target photov_410469450160.lnk
- Size 1KB
- SHA256 49ffad2fad6a0278a95c3e3c91da9bf2072b80a4d2c51e93fe5fe613d88708c9
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-
- Target videoa_057489532115.mp4
- Size 1KB
- SHA256 0121fc3993101d830efe6fd11a417b073cda197ba10d8b8f84c050982969ab7c
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)