General

  • Target

    vbc.exe

  • Size

    399KB

  • Sample

    200709-5r4a4abw4n

  • MD5

    145b046835c71c438ab4e6bf08661cf5

  • SHA1

    9f1464c5e8cc6e7682866c6e735ee282099a91c1

  • SHA256

    fb457c1476f45e410e044c90f1d3c8d60088d2eed6982cc59cb60d1c96fcb05f

  • SHA512

    1d8322754396f4988e6d185a3935596861fd83f1256cb344d1111179fc88a868bd2e43a346d8cfe1a3c696386646609810ce7d424359616acc6a41a858ef8785

Score
7/10

Malware Config

Targets

    • Target

      vbc.exe

    • Size

      399KB

    • MD5

      145b046835c71c438ab4e6bf08661cf5

    • SHA1

      9f1464c5e8cc6e7682866c6e735ee282099a91c1

    • SHA256

      fb457c1476f45e410e044c90f1d3c8d60088d2eed6982cc59cb60d1c96fcb05f

    • SHA512

      1d8322754396f4988e6d185a3935596861fd83f1256cb344d1111179fc88a868bd2e43a346d8cfe1a3c696386646609810ce7d424359616acc6a41a858ef8785

    Score
    7/10
    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scripting

1
T1064

Defense Evasion

Scripting

1
T1064

Credential Access

Credentials in Files

2
T1081

Collection

Data from Local System

2
T1005

Tasks