General

  • Target
    https://www.mediafire.com/file/j9k8stg0ou2yp08/DEMANDE_DE_DEVIS_8100054_SNIM_STEEL_SPA.lzh/file
  • Sample260804-hcb6natape

Malware Config

Targets

    • Target
      https://www.mediafire.com/file/j9k8stg0ou2yp08/DEMANDE_DE_DEVIS_8100054_SNIM_STEEL_SPA.lzh/file
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks