General
- Target 22082026_1658_19082026_Automatic insurance premium payment_v3.lnk.zip
- Size 2KB
- Sample260822-vgw3vawgrd
- SHA256 49891e41dde91b3ac0903c6ac2984dddffaad18d1e8dd86fc014d05c8097d785
Score
8/10
Malware Config
Targets
-
- Target Automatic insurance premium payment_v3.lnk
- Size 11KB
- SHA256 cb1a2821ee2c2a13358d9863118c97b4e53286be6f086ef5557f41bcb178d5d4
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Executes a VBScript file via the Windows Script Host.