General
- Target 465960718c0abddc21574f80c2225d7cd237e8700f0b0f99ba862b9f33eff9d4.zip
- Size 1.3MB
- Sample260831-tlmvaswajf
- SHA256 0b15dc76cc3c24aaecafb063c31f1de35db1a4af25ec13185aac3f96f165f059
Score
7/10
Malware Config
Targets
-
- Target 465960718c0abddc21574f80c2225d7cd237e8700f0b0f99ba862b9f33eff9d4
- Size 1.6MB
- SHA256 465960718c0abddc21574f80c2225d7cd237e8700f0b0f99ba862b9f33eff9d4
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Detect suspicious telegram bot
Detect suspicious telegram bot.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1