General
- Target 14e8152418cf55d0eda3d6814b1714625d787813f15b5a7ac186fbbb16b38fe0.zip
- Size 1KB
- Sample260821-vesbwatfpd
- SHA256 87da4f05e6e2aae61d54df811d41d4822191306b7249642384814ce78efe9e0a
Score
8/10
Malware Config
Targets
-
- Target NotaFiscal-M29G5O.hta
- Size 2KB
- SHA256 f373fd9a47da49d21eba458d309f0f9adb67a511d60a6f7cdb9463c95b989af2
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Network Share Discovery
Attempt to gather information on host network.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1