General
- Target 25a3b3bc5096d37bdf34466c28f5d04021cefe6a75d0bc3b8895f6c15a132b91.exe
- Size 912KB
- Sample260825-dvdd8astez
- SHA256 25a3b3bc5096d37bdf34466c28f5d04021cefe6a75d0bc3b8895f6c15a132b91
Score
8/10
Malware Config
Targets
-
- Target 25a3b3bc5096d37bdf34466c28f5d04021cefe6a75d0bc3b8895f6c15a132b91.exe
- Size 912KB
- SHA256 25a3b3bc5096d37bdf34466c28f5d04021cefe6a75d0bc3b8895f6c15a132b91
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Skrifttegns143.Akv
- Size 52KB
- SHA256 0e2052647e5ab82c8df387691bb6871294de498cb89a88ce1d5b42f02a49289a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.