General
- Target photov_920857654059.zip
- Size 1KB
- Sample260727-pgmara1grc
- SHA256 2814db70bac4febf82bba54e7052ec91d3d926e157259a80ef9b77d4bf168095
Score
8/10
Malware Config
Targets
-
- Target photov_920857654059.lnk
- Size 1KB
- SHA256 e3462453bcd71e6dfeefb9286e8941a48f4d44a34fa079402f38febe359adf74
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-
- Target videoa_555256574138.mp4
- Size 973B
- SHA256 99c319fa3639c13262ee6cf6f486031cfd6913456cbe240a40459e01322b892f
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)