General
- Target AccountStatement_48202617552.js
- Size 2.7MB
- Sample260805-j6b87agb58
- SHA256 03fb65c5f63b5cb6b36f083152c98321905d300b0653a863932a6574d016de26
Score
8/10
Malware Config
Targets
-
- Target AccountStatement_48202617552.js
- Size 2.7MB
- SHA256 03fb65c5f63b5cb6b36f083152c98321905d300b0653a863932a6574d016de26
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Accesses Microsoft Outlook profiles
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1