General
- Target QuarantineMessage (18).zip
- Size 131KB
- Sample260826-ltbs1atsev
- SHA256 12be2509d16d884f83f0566c656e5dc53ba614784d32b6e2d098a0ece2c26d08
Score
8/10
Malware Config
Targets
-
- Target payment-870.pdf
- Size 126KB
- SHA256 d7e42e1531d2da2ffb670f0d002d8c4a57f12cd2bf28eaf3cc230e8a5683b0cf
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1