General
- Target photov_984769157306.zip
- Size 1KB
- Sample260731-g2e36sxtav
- SHA256 f476a31618c1548a4bd7960755906787d5374cb856b3ea68eaf11be9d1def430
Score
8/10
Malware Config
Targets
-
- Target photov_984769157306.lnk
- Size 2KB
- SHA256 053acf58310f45f8066e1efd03fcdbfc5b3d2441d2c325f8e7ea586b183f0100
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_513918748414.mp4
- Size 1KB
- SHA256 c75a59cfcac9ff5fd7c30d60e9b0715e7f731ae6f1bafa5a6493fbd6e89bffe2
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)