General
- Target photov_899246928324.zip
- Size 1KB
- Sample260727-pf13hs1gpd
- SHA256 c7ad3c3bcc7cb4cdc5c586d0415121a07c2694097a6526dee2b261e15fa4ac05
Score
8/10
Malware Config
Targets
-
- Target photov_899246928324.lnk
- Size 1KB
- SHA256 5f9421f7b9f6b5633ebe8b3fe9d5d0558032d74058afd4d8c87c911ba21b7c1c
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-
- Target videoa_697887201166.mp4
- Size 1KB
- SHA256 6e9b268523f05400c7e3f6b97aaa38b24d0d3bf86b41e4ddfd6fe0d6cccaa55d
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)