General
- Target documentaz_661.vbs
- Size 3KB
- Sample220430-htr87scdhp
- SHA256 46430bbb1d9b0711f1013f570898e873c34a1d3cd486b80b3f5f2af9cf9c896c
- MD5 b3916883ed8017a17626bab708fcb1e8
- SHA1 c417745a07d3895c9cc55c687b3f2ca77d5b36fc
- SHA512 54bc0381d4250484938d96f14dd942264a0f9ae9a2380e930ed1fb22189df893cb7991b7d4e2e32c768c2b86fb6aea72a6b41d45faa901180d7deab8aa9c43c7
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
documentaz_661.vbs
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
documentaz_661.vbs
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
ps1.dropper
http://basesline.top/index.php
Targets
-
- Target documentaz_661.vbs
- Size 3KB
- SHA256 46430bbb1d9b0711f1013f570898e873c34a1d3cd486b80b3f5f2af9cf9c896c
- MD5 b3916883ed8017a17626bab708fcb1e8
- SHA1 c417745a07d3895c9cc55c687b3f2ca77d5b36fc
- SHA512 54bc0381d4250484938d96f14dd942264a0f9ae9a2380e930ed1fb22189df893cb7991b7d4e2e32c768c2b86fb6aea72a6b41d45faa901180d7deab8aa9c43c7
- MD5 SHA1 SHA512
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.