General
- Target photov_726532253506.zip
- Size 1KB
- Sample260727-g8r2baxbpd
- SHA256 4a14bb16ca3fff54a62affe01069772b1abde8722308ee9d07c0df6e85a43c6e
Score
8/10
Malware Config
Targets
-
- Target photov_726532253506.lnk
- Size 1KB
- SHA256 62e4ae78a47eae6b0d5fcfbb9b888c3343b4f24cab8d95b1ea75f6f661de6809
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target videoa_039685890999.mp4
- Size 1KB
- SHA256 a27d4e7386620e488229357f4837bf3f2df6b95157776a46453dc3b274d09b47
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)