General
- Target wiggle-pro_edition-v2.01.zip
- Size 391KB
- Sample260824-mem36afj8t
- SHA256 2c7c351f384210a9dfb431b1ca2116f32a7354f580eb1e7890fdeba695e42687
Score
8/10
Malware Config
Targets
-
- Target assets/Toaster-CoSnE7G9.js
- Size 454KB
- SHA256 e52f8b759213ba4dee9ad92cfaaa6a0b85f370190d966408fe6752b303c264ee
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Powershell Invoke Web Request.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
- Target assets/main-C968dwb-.js
- Size 191KB
- SHA256 3f70f13358c9311626f2c7ec55b5aeb48ca7ee58959e87ff06f8437c25359317
Score3/10 -
- Target assets/upgrade-Cn6Ubji5.js
- Size 7KB
- SHA256 9140a69eb7841d8157d2f41e288750ef187f689ffe8fd67de9140fdb0b967934
Score3/10 -
- Target main/index.html
- Size 3KB
- SHA256 12784c0e58cdfef4961b05e2511a02a943c16c80326ee3c07ce8152a440d44cb
Score3/10 -
- Target upgrade/index.html
- Size 3KB
- SHA256 bf565c7723b1802e19ab0c638ccd1fde339661e62bbf1fcbb487c2f56822b73e
Score3/10 -
- Target installation-guide.html
- Size 663B
- SHA256 5cfe7ee231a059514ccadf15dfb1a76c28863b82f345b0a0e5d4d9152a12c4f3
Score3/10
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1