General
- Target dbf21bd9b06df40bbb085a275a27df3a90ad80c797b06090ca8305281508c325
- Size 3.0MB
- Sample260815-ae8nmsbp7v
- SHA256 dbf21bd9b06df40bbb085a275a27df3a90ad80c797b06090ca8305281508c325
Score
8/10
Malware Config
Targets
-
- Target dbf21bd9b06df40bbb085a275a27df3a90ad80c797b06090ca8305281508c325
- Size 3.0MB
- SHA256 dbf21bd9b06df40bbb085a275a27df3a90ad80c797b06090ca8305281508c325
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
- Target CocCocReal.exe
- Size 13.0MB
- SHA256 7bd45b747077934cb5d27f6d68294b9b60b690639ae5cdfc9601e733493bc9e5
Score4/10