General
- Target e88b2c2ffecfd4bc064a95b2517d5ee864bc0ed6c3abe9bfa6a6ef983be620e1
- Size 7KB
- Sample260814-k51e3azdpg
- SHA256 e88b2c2ffecfd4bc064a95b2517d5ee864bc0ed6c3abe9bfa6a6ef983be620e1
Score
7/10
Malware Config
Targets
-
- Target e88b2c2ffecfd4bc064a95b2517d5ee864bc0ed6c3abe9bfa6a6ef983be620e1
- Size 7KB
- SHA256 e88b2c2ffecfd4bc064a95b2517d5ee864bc0ed6c3abe9bfa6a6ef983be620e1
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.