General

  • Target
    1389399d6d77817aeb5c05fa636343a9d2ea440bc82b46f248fdad26c26c289a
  • Size 160.1MB
  • Sample260812-zl346svbma
  • SHA256 1389399d6d77817aeb5c05fa636343a9d2ea440bc82b46f248fdad26c26c289a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      1389399d6d77817aeb5c05fa636343a9d2ea440bc82b46f248fdad26c26c289a
    • Size 160.1MB
    • SHA256 1389399d6d77817aeb5c05fa636343a9d2ea440bc82b46f248fdad26c26c289a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks