Overview

overview

10

Static

static

1

707dc0aa93...7c.vbs

windows7-x64

10

707dc0aa93...7c.vbs

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    707dc0aa9364e5d49f5b76d02babf27c

  • Size

    1KB

  • Sample

    240123-y985nahec7

  • MD5

    707dc0aa9364e5d49f5b76d02babf27c

  • SHA1

    8295c237d9ad75c08062619b218b4ea5d0ecd569

  • SHA256

    9bd7726cd18307f64b1646ff93474899b48c8873b511f96dd5e0f9634236115b

  • SHA512

    1544d8c5842e9f6bca87b2c6bb7431f62d7136421905f2faa348a5dffac2b691d1071a6d1d4e3ac2fa96b00c6f9926dcc0da670946754063c986cf512aa21a45

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://transfer.sh/1B6slf1/bypass_book.txt

Targets

    • Target

      707dc0aa9364e5d49f5b76d02babf27c

    • Size

      1KB

    • MD5

      707dc0aa9364e5d49f5b76d02babf27c

    • SHA1

      8295c237d9ad75c08062619b218b4ea5d0ecd569

    • SHA256

      9bd7726cd18307f64b1646ff93474899b48c8873b511f96dd5e0f9634236115b

    • SHA512

      1544d8c5842e9f6bca87b2c6bb7431f62d7136421905f2faa348a5dffac2b691d1071a6d1d4e3ac2fa96b00c6f9926dcc0da670946754063c986cf512aa21a45

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks