Overview

overview

8

Static

static

1

HH-67.vbs

windows10-1703-x64

3

HH-67.vbs

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HH-67.vbs

  • Size

    9KB

  • Sample

    231011-qep5asba83

  • MD5

    4870ffa8695520621bcbf1b294447aee

  • SHA1

    dd751d03c5766891c8156dc4024a5d11ec90e560

  • SHA256

    d1682e4468d87d86f2a0631e0e7b5803b1dddd8dde915a9016602831934557ff

  • SHA512

    e988121a415822969807b7ed12d2d28be86e5f89cfe5208ec5e8f1a671e533e2f0992b47d66979ddb4792eef8239da45f4cf4479e3e194ca20e65ca960c91ba6

  • SSDEEP

    192:f8IMu0Cp4EmpXUHg4KR/oNQsK/iKiWSDX4X:f8PzE0ig4KR/aQsKHiWAIX

Score
8/10

Malware Config

Targets

    • Target

      HH-67.vbs

    • Size

      9KB

    • MD5

      4870ffa8695520621bcbf1b294447aee

    • SHA1

      dd751d03c5766891c8156dc4024a5d11ec90e560

    • SHA256

      d1682e4468d87d86f2a0631e0e7b5803b1dddd8dde915a9016602831934557ff

    • SHA512

      e988121a415822969807b7ed12d2d28be86e5f89cfe5208ec5e8f1a671e533e2f0992b47d66979ddb4792eef8239da45f4cf4479e3e194ca20e65ca960c91ba6

    • SSDEEP

      192:f8IMu0Cp4EmpXUHg4KR/oNQsK/iKiWSDX4X:f8PzE0ig4KR/aQsKHiWAIX

    Score
    8/10

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks