General
-
Target
c10e0d734ba7fdb30bf8081eeb4758ab60d165552bb97d476a47de35dc0bc040
-
Size
68KB
-
Sample
220221-mbemlsfafr
-
MD5
d00bbc27c56f446e30f07c81d035c983
-
SHA1
a83f9ab14d923869ff68f7b074d99382cdba7d89
-
SHA256
c10e0d734ba7fdb30bf8081eeb4758ab60d165552bb97d476a47de35dc0bc040
-
SHA512
c2004ee9db57a538b75d2211b6d2565681c118ed74d6688bd3d6666b2cdf5216360b5fe1b6552ab6688e275a67ed3e40397f7d6ae782f8f79b86e7334b769840
Malware Config
Targets
-
-
Target
Allegato_doc_02613440060.vbs
-
Size
8KB
-
MD5
6266da42dda2a91e97c63181b85b26d4
-
SHA1
2a0673cc7ea00b5187dac046b906aa1018317236
-
SHA256
12bad94c43427bae4e3855ebdd60d32d7a6305f108a811ead926950450ec503b
-
SHA512
fed5ca3e0b5f2214d12c6e8e6d86b6f96589e4629a588bb91cb3df90e3f20c17bb0413f9cbc1683a64642a5b2aa1ddc3ce2a59bb674febe28676c5a5157913c6
Score10/10-
sLoad
sLoad is a PowerShell downloader that can exfiltrate system information and deliver additional payloads.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-