Allegato_Sload_Italy_vbs (27).vbs

General
Target

Allegato_Sload_Italy_vbs (27).vbs

Size

7KB

Sample

201123-tcqt2tttye

Score
10 /10
MD5

9cab983254fb7916cb169b0736919007

SHA1

ed7fc56e371795f3cd30ae5320a209719b17700c

SHA256

900aaef2390d44e3cf2950ac49d8d44a79c5ba18c683a8a5d25638641e247daa

SHA512

3fa3c26dc478a13621115003d0f7107f4875105f09259c6dd247431b1c8ed9d143e8a44078c89c3fb40de76c6eb326d1f0937c8b2887859811be4d67b1db4419

Malware Config
Targets
Target

Allegato_Sload_Italy_vbs (27).vbs

MD5

9cab983254fb7916cb169b0736919007

Filesize

7KB

Score
10 /10
SHA1

ed7fc56e371795f3cd30ae5320a209719b17700c

SHA256

900aaef2390d44e3cf2950ac49d8d44a79c5ba18c683a8a5d25638641e247daa

SHA512

3fa3c26dc478a13621115003d0f7107f4875105f09259c6dd247431b1c8ed9d143e8a44078c89c3fb40de76c6eb326d1f0937c8b2887859811be4d67b1db4419

Tags

Signatures

  • sLoad

    Description

    sLoad is a PowerShell downloader that can exfiltrate system information and deliver additional payloads.

    Tags

  • Executes dropped EXE

  • Enumerates physical storage devices

    Description

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

    TTPs

    System Information Discovery

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Execution
            Exfiltration
              Impact
                Initial Access
                  Lateral Movement
                    Persistence
                      Privilege Escalation
                        Tasks

                        static1

                        behavioral1

                        10/10

                        behavioral2

                        10/10