da372170c6fa0828db5e4fb5cf15749d09391b6f6b998dc6a27ecc68e26ff30a | Triage

Sharing

General

Target

strcomputer.vbs
Size

2KB
Sample

240318-wbzgfsfa7t
MD5

26b6d2fcf318aecf9df98d0f4705a671
SHA1

1751305572fc3e87bdcf8f5a46fd45fee3a3830d
SHA256

da372170c6fa0828db5e4fb5cf15749d09391b6f6b998dc6a27ecc68e26ff30a
SHA512

46622857c48e01b8222eb0613b77d88155d17b8694e13b6edc3c8d88d6278104496680381d595a37ace5a18f71fe85c7405a866b3092d09618da4832da925784

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  strcomputer.vbs
- Size
  
  2KB
- MD5
  
  26b6d2fcf318aecf9df98d0f4705a671
- SHA1
  
  1751305572fc3e87bdcf8f5a46fd45fee3a3830d
- SHA256
  
  da372170c6fa0828db5e4fb5cf15749d09391b6f6b998dc6a27ecc68e26ff30a
- SHA512
  
  46622857c48e01b8222eb0613b77d88155d17b8694e13b6edc3c8d88d6278104496680381d595a37ace5a18f71fe85c7405a866b3092d09618da4832da925784
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Disables Task Manager via registry modification
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1