General
- Target 8888718ea15953747b75131ecaa117a1acb199e367bbeadc6637dc361ad4ba36.zip
- Size 9.5MB
- Sample261110-tdcdlabw51
- SHA256 89bae7dd1e91a9402087968169f2dca62f1686fbc9bbc2c73660ed31690301ad
Score
7/10
Malware Config
Targets
-
- Target 8888718ea15953747b75131ecaa117a1acb199e367bbeadc6637dc361ad4ba36
- Size 9.7MB
- SHA256 8888718ea15953747b75131ecaa117a1acb199e367bbeadc6637dc361ad4ba36
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Custom signature
Detect suspicious telegram bot
Detect suspicious telegram bot.