General
-
Target
orden 77100.vbs
-
Size
292KB
-
Sample
231011-xvyjyahe87
-
MD5
1d804c707e82e967ce7e47519f292d49
-
SHA1
45571fbb7f244f8a31fa6f3faeab7fcaae3035f2
-
SHA256
b116b683c17736feafd9b3d20bb58b8e45fd2cab888145fc3891f46e38ef0f2a
-
SHA512
88174c038e82f6db6c63f15fc96fb7c00b8350f2b70d2bf8095004195cab828dd3c6cdec3fd76e1e29335c70c6d93de49f94d8177c68c0d8929419ed0df94682
-
SSDEEP
1536:GA4xi/NbR0k4NkOhXCcsBsrsT0sGz/razpazpNz2zLzUzTzpzqvzSzazSz3zbzTI:axi/NbCk4NkOhycsBsrsT0s0ruuw97
Static task
static1
Behavioral task
behavioral1
Sample
orden 77100.vbs
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
orden 77100.vbs
Resource
win10v2004-20230915-en
Malware Config
Extracted
https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937
https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937
Targets
-
-
Target
orden 77100.vbs
-
Size
292KB
-
MD5
1d804c707e82e967ce7e47519f292d49
-
SHA1
45571fbb7f244f8a31fa6f3faeab7fcaae3035f2
-
SHA256
b116b683c17736feafd9b3d20bb58b8e45fd2cab888145fc3891f46e38ef0f2a
-
SHA512
88174c038e82f6db6c63f15fc96fb7c00b8350f2b70d2bf8095004195cab828dd3c6cdec3fd76e1e29335c70c6d93de49f94d8177c68c0d8929419ed0df94682
-
SSDEEP
1536:GA4xi/NbR0k4NkOhXCcsBsrsT0sGz/razpazpNz2zLzUzTzpzqvzSzazSz3zbzTI:axi/NbCk4NkOhycsBsrsT0s0ruuw97
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-