General
- Target 31072026_1643_photov_506422274143.lnk.zip
- Size 1KB
- Sample260731-t773csbr8y
- SHA256 e1bad04da5f4512e54868004828c7348f972b9b2a02fb7703edfdde025664641
Score
8/10
Malware Config
Targets
-
- Target photov_506422274143.lnk
- Size 2KB
- SHA256 551a1e644dd1e26fa07c47e55bf6961d3fa539d1935d02d6bf8cbc76ebe6a233
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target videoa_009795411681.mp4
- Size 1KB
- SHA256 9146c44f005f2470336526f9dcbc34726e18d140310938d46d072d4f894a86ae
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)