General

  • Target
    https://stilles-oertchen.de/HomeWell/download.html
  • Sample260728-byfmmsed64

Malware Config

Targets

    • Target
      https://stilles-oertchen.de/HomeWell/download.html
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks