General
-
Target
infected.vbs
-
Size
110KB
-
Sample
220311-dngs3aadfr
-
MD5
8dc859faaae724496048e07a5110180b
-
SHA1
58b589269f78f36bd25eae913984c2e904d9e359
-
SHA256
5a9b347e38b129cdc4fb31e15c01381c60bc4d9c29f3129a78a6f03648e2273c
-
SHA512
c612ad3d9b4f8917e4406fa2edf7e5a24e66da3e09c960f823fcb2fa48a87634442be78f67211af80c7cb703015d6a5db12a8b0b8480c2d2b003b921f721b800
Static task
static1
Behavioral task
behavioral1
Sample
infected.vbs
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
infected.vbs
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
infected.vbs
-
Size
110KB
-
MD5
8dc859faaae724496048e07a5110180b
-
SHA1
58b589269f78f36bd25eae913984c2e904d9e359
-
SHA256
5a9b347e38b129cdc4fb31e15c01381c60bc4d9c29f3129a78a6f03648e2273c
-
SHA512
c612ad3d9b4f8917e4406fa2edf7e5a24e66da3e09c960f823fcb2fa48a87634442be78f67211af80c7cb703015d6a5db12a8b0b8480c2d2b003b921f721b800
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-