General
- Target Report-8.vbs
- Size 214KB
- Sample231010-q5clwsfh29
- SHA256 a448c4abbb2f1844a8fa0c929cd84c2f6f57a4af0442a6a4b5307af89c35cef6
- MD5 726bda475bacd81fb0887a313635f3aa
- SHA1 1d563d889ccb89453e7d401304f6fc5f03a0d335
- SHA512 d6b3e4abf6377fc378def948696aec564b1160ba51bedd910b2a84bb72059799cd73c05e0294912d9aa3daed00e280bfe3c066724cdc5160b062afc85a7bcda9
- SSDEEP 3072:geb6b7uUsfypTYS4mVUVhKIgyHJr/niQ6L577WJRma7JdDnrXHvTD06Cms31t2eh:j6b7OoUaU2uHBN85zcnLcWpOnFFb
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Report-8.vbs
Resource
win7-20230831-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Report-8.vbs
Resource
win10v2004-20230915-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Report-8.vbs
- Size 214KB
- SHA256 a448c4abbb2f1844a8fa0c929cd84c2f6f57a4af0442a6a4b5307af89c35cef6
- MD5 726bda475bacd81fb0887a313635f3aa
- SHA1 1d563d889ccb89453e7d401304f6fc5f03a0d335
- SHA512 d6b3e4abf6377fc378def948696aec564b1160ba51bedd910b2a84bb72059799cd73c05e0294912d9aa3daed00e280bfe3c066724cdc5160b062afc85a7bcda9
- SSDEEP 3072:geb6b7uUsfypTYS4mVUVhKIgyHJr/niQ6L577WJRma7JdDnrXHvTD06Cms31t2eh:j6b7OoUaU2uHBN85zcnLcWpOnFFb
- MD5 SHA1 SHA512 SSDEEP
Score8/10Blocklisted process makes network request
Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE