General
- Target 255ef1d6f1da0b68446f349349d966c43ecbc96dca378836b9cc37abc013d671.exe
- Size 217KB
- Sample260729-ls8rcadn8z
- SHA256 255ef1d6f1da0b68446f349349d966c43ecbc96dca378836b9cc37abc013d671
Score
8/10
Malware Config
Targets
-
- Target 255ef1d6f1da0b68446f349349d966c43ecbc96dca378836b9cc37abc013d671.exe
- Size 217KB
- SHA256 255ef1d6f1da0b68446f349349d966c43ecbc96dca378836b9cc37abc013d671
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.