General
- Target 22082026_0252_17082026_Spysok_mayna.docx.lnk.zip
- Size 13KB
- Sample260822-dcrh5avtex
- SHA256 8ddf652f7e8129997372991f963c19d6b381f2432d121dbd8daf81baefc0b9d0
Score
8/10
Malware Config
Targets
-
- Target Nakaz_MO_perevirka_mayna.docx.lnk
- Size 6KB
- SHA256 9aef314236d84d11ba53cbd53ba7ecf84a6c0fc63106e01db9aed6c9af77abad
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Spysok_mayna.docx.lnk
- Size 6KB
- SHA256 e81af01870c21d6acb4891201548b463cbe3973523ca04797fbee0aefe925265
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.