General
- Target a79adc37a723dd89014f01158a19cecc.exe
- Size 292KB
- Sample260811-19pr5ashqe
- SHA256 1bba4e037532af6aa204171b9022d6d5de22aaa248f3199a9c15802fced787f2
Score
10/10
Malware Config
Targets
-
- Target a79adc37a723dd89014f01158a19cecc.exe
- Size 292KB
- SHA256 1bba4e037532af6aa204171b9022d6d5de22aaa248f3199a9c15802fced787f2
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.