General
- Target 91327e44cfd1cc4a1ec01b6b9a48e04c43f04f8cd61af32d2bd817e8760a06e4
- Size 3.4MB
- Sample261102-jtqwtaf181
- SHA256 91327e44cfd1cc4a1ec01b6b9a48e04c43f04f8cd61af32d2bd817e8760a06e4
Score
7/10
Malware Config
Targets
-
- Target 91327e44cfd1cc4a1ec01b6b9a48e04c43f04f8cd61af32d2bd817e8760a06e4
- Size 3.4MB
- SHA256 91327e44cfd1cc4a1ec01b6b9a48e04c43f04f8cd61af32d2bd817e8760a06e4
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1