Extracted

• • Target
    米中首脳会談とトランプ次期政権の対北朝鮮政策に関する資料質問紙.pdf.lnk
  • Size 1KB
  • SHA256 0bda23628a5955e0a089d5459631224f10c9d7f72a5ede5603e7465f8651c239
  • MD5 92e972eefc141ff1bc64c5819629e45c
  • SHA1 02f3029be0b7b2432aba20fd9f992c27234607d8
  • SHA512 aa13a9e55ba5758e9d61d8d832769a3925d2bbce92b96cbc3e8da204a24257e6f696ffb7eca2a5682a9049c7d8c93bfd996b94f19d8960c212e7ace31850809a
  • TLSH
    T140212B143FDA6711FBF78D7E94A97744992A7841FD619F0D0160698C2832682DCB0F1F
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  adwarediscoveryexecutionpersistencespyware

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral1behavioral2