General
- Target ezyZip.zip
- Size 15.9MB
- Sample260807-wlnspshc47
- SHA256 aff033025a9ee5162a35ed1499c619c768c13a8c0a970f779f3c6f6fab70828a
Score
8/10
Malware Config
Targets
-
- Target Installer-1.0.7.exe
- Size 9.8MB
- SHA256 48f359326787a848b89d838a318d797c51fd7feeeee602fff5f46b9d3f7b53ce
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target uninstalltool_setup.exe
- Size 6.7MB
- SHA256 3f1603b39d0d581e9cdf71b099c189b00b49bc80bac73e830b63d3274381729b
Score4/10