Extracted

• • Target

    NEW_ORDER.vbs

  • Size

    200KB

  • MD5

    b42f3a12a9a7c9bc5657036af831b4a6

  • SHA1

    c1f760b0be90198dbef71ea99d4680c1a4e53f59

  • SHA256

    ba46446d61f65e10027d120d28022cb6864ba0174c599b23a96b10bd08764699

  • SHA512

    d6908b165736c5de94b4d4ad62540704dda318b4f4ec9955ea7eb51427f5845073c2866f5481fd3b9c56c7c131c0a2837217e55b6713e9a6922d0385ea3cd808

  • SSDEEP

    3072:UYYyPmaMC1DWXWjvvvvvbky7y7y7yMyuyJyVycykyFyPy0y8yDycyRyRyG+m+6+7:mGMb6h1X

  Score

  10^/10

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1