General
- Target 08082026_1550_06082026_Nakaz_MO_perevirka_mayna.docx.lnk.zip
- Size 13KB
- Sample260808-tabb5ahp4s
- SHA256 a5fefe72b06ec74bae93c255e58bd017ab49cfcbf06114f08372c9d82b2e1307
Score
8/10
Malware Config
Targets
-
- Target Nakaz_MO_perevirka_mayna.docx.lnk
- Size 6KB
- SHA256 baa5594ea62feb45ee87671c4a1bcdca2a9f26828b0c620d6a2a79d19fe1c75d
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
- Target Spysok_mayna.docx.lnk
- Size 6KB
- SHA256 b6bd0a0d0dd4d630bdf0f77dd809d5f1eec452fe1e4727de4d2846b9ed85e533
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.