Overview

overview

10

Static

static

1

c0f5413294...77.vbs

windows7-x64

10

c0f5413294...77.vbs

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0f541329481adfbc6c10b4f11a05d77

  • Size

    947B

  • Sample

    240311-s27nzaed6x

  • MD5

    c0f541329481adfbc6c10b4f11a05d77

  • SHA1

    c9e8901d8e3f2691abd338b7067b0e0af168ce35

  • SHA256

    0944a07de477789bc45792b4fee36cfed61ea7451531b8b7171ad675deae968b

  • SHA512

    357b1c459bdff50fcd392ada137893080a09214896ea0f758acbadb71d52e217f8eae8b91efac72f26d527c9c8952ad0ef93f1d94fdbda1b49d9667a1e977eba

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://transfer.sh/1kqpOIu/bypass.txt

Targets

    • Target

      c0f541329481adfbc6c10b4f11a05d77

    • Size

      947B

    • MD5

      c0f541329481adfbc6c10b4f11a05d77

    • SHA1

      c9e8901d8e3f2691abd338b7067b0e0af168ce35

    • SHA256

      0944a07de477789bc45792b4fee36cfed61ea7451531b8b7171ad675deae968b

    • SHA512

      357b1c459bdff50fcd392ada137893080a09214896ea0f758acbadb71d52e217f8eae8b91efac72f26d527c9c8952ad0ef93f1d94fdbda1b49d9667a1e977eba

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks