Extracted

• • Target

    FACTURAgzneih0__Ikb_(295).PDF.vbs

  • Size

    781B

  • MD5

    498f2220d6962b5b49fc6c2750610a90

  • SHA1

    06485ce9a6ba48a240c712497900a4240385ea02

  • SHA256

    36c56e3a9202c35e76a3ed10d00650c821b6ee9e1b3834fbab5fa5047d1ee99c

  • SHA512

    e7bd5952c327938e373811d3979c3a930d20782a9d8fc06f5f315da87f43ca02e3db86f65aaafebf63c86800df5733005f67db5a6dbf4546fd17ce4ed9649e42

  Score

  10^/10

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  behavioral1behavioral2