General
- Target photov_892874790165.zip
- Size 1KB
- Sample260731-pn4tdatalb
- SHA256 c861312baee5043c277df834750a6329eaa30b5c42bdc2f5b34e394b20ce2055
Score
8/10
Malware Config
Targets
-
- Target photov_892874790165.lnk
- Size 2KB
- SHA256 a52e64c0ccd8c11af3f352a3c23d2d2f4a2fc100da0b34ececd20c8e791d3256
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_208435207320.mp4
- Size 1KB
- SHA256 76798d5e98c55dd685b4a5cdd9d280365a65d8e325481e95f76bb2c34a35cb15
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)