General
- Target photov_809544229401.zip
- Size 1KB
- Sample260731-gxgffadh74
- SHA256 5a0536b8cf76a82c482ab19d58c5fb9cd0a17d1be44de8d03066b9a12575bfba
Score
8/10
Malware Config
Targets
-
- Target photov_809544229401.lnk
- Size 2KB
- SHA256 b7df3b895cedc3818be70aed0d8078287ba42fa57a718d57190f025f5ace3f8d
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_797850359859.mp4
- Size 1KB
- SHA256 293994a7570d029eb03c1f5222178ff0f8a9695a1f13df4529b97a9124cd5d47
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)