General
- Target A4JPXHgUnvonCKzXRK5w6AN2h0xydsq4KQGLr1Qf5f0SVOFqJdF-ipnF87tsOqPayqAHvAOaMT2Rww_wFLr_8cgHf3uu3hYsBae_plP54tsH9xoa4h2V5a_apHjj99PV19Cmm9h0F0YcXIyFV1V3y5QpGKb3S4Syws4YdKluP2eiMBiH-hEbr1-bRsLfMXYS.jpe
- Size 77KB
- Sample261027-xb792af16k
- SHA256 b2e0752dde027914d2751507c5185252ea8094467eadf1937eed2cb53ddac6ac
Score
7/10
Malware Config
Targets
-
- Target A4JPXHgUnvonCKzXRK5w6AN2h0xydsq4KQGLr1Qf5f0SVOFqJdF-ipnF87tsOqPayqAHvAOaMT2Rww_wFLr_8cgHf3uu3hYsBae_plP54tsH9xoa4h2V5a_apHjj99PV19Cmm9h0F0YcXIyFV1V3y5QpGKb3S4Syws4YdKluP2eiMBiH-hEbr1-bRsLfMXYS.jpe
- Size 77KB
- SHA256 b2e0752dde027914d2751507c5185252ea8094467eadf1937eed2cb53ddac6ac
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1