General
- Target 937e4f8133d72d80f8cb9977c05a744bf7ef70823cd3dde7a4a6e376a0946c6c.bin
- Size 2KB
- Sample260730-xeasyaytdx
- SHA256 937e4f8133d72d80f8cb9977c05a744bf7ef70823cd3dde7a4a6e376a0946c6c
Score
8/10
Malware Config
Targets
-
- Target ztrwpdxy.bat
- Size 3KB
- SHA256 b78cdf3ff3def0a9800ff193bb0d4928072e1296c7801fc095fc9e69442a333c
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.