Overview

overview

10

Static

static

56912c17de...4b.vbs

windows7_x64

10

56912c17de...4b.vbs

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56912c17def5a45f1d8f35567a25441e745ca0dbdc71668df3cee70a2638254b

  • Size

    9KB

  • Sample

    220221-2ekelacbhn

  • MD5

    f680c06c3ba90319e66f7e51879aa661

  • SHA1

    97937ce0a605ac4ba37e25c090cc52b8d8c158ed

  • SHA256

    56912c17def5a45f1d8f35567a25441e745ca0dbdc71668df3cee70a2638254b

  • SHA512

    86def545293b71e4171f76f19f80628833e270c8ef62f1bda0de5fa22bbe86396888f17de296da9d0f5198c1435263be907d342034a7ebd5ff9c45f205bc8473

Score
10/10
sloadstealertrojan

Malware Config

Targets

    • Target

      56912c17def5a45f1d8f35567a25441e745ca0dbdc71668df3cee70a2638254b

    • Size

      9KB

    • MD5

      f680c06c3ba90319e66f7e51879aa661

    • SHA1

      97937ce0a605ac4ba37e25c090cc52b8d8c158ed

    • SHA256

      56912c17def5a45f1d8f35567a25441e745ca0dbdc71668df3cee70a2638254b

    • SHA512

      86def545293b71e4171f76f19f80628833e270c8ef62f1bda0de5fa22bbe86396888f17de296da9d0f5198c1435263be907d342034a7ebd5ff9c45f205bc8473

    Score
    10/10
    sloadstealertrojan

    • sLoad

      sLoad is a PowerShell downloader that can exfiltrate system information and deliver additional payloads.

      trojanstealersload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks