General
- Target order enquiry PDF.vbs
- Size 563KB
- Sample240402-qphszabe62
- SHA256 9f586373713feb004b4bc48a2b41962933f4f4d0fd44dc2c9d402e3bfdfffef0
- MD5 cc54a0d7c9fbdf633b6bd2f8613e179c
- SHA1 721eec20349534de85d4feaef4fb32064aba11ee
- SHA512 6c2bfdbfada7007520793a9166bc1cb23b893081bd07d5b29f72a8797baeff7e983c0c4bee47de68406473e18b4dbbfe0272a7e0b45ab42bafe5279a0d3e233e
- SSDEEP 12288:jfdS6w2qbNnbk1a7X4dLmoJH8Q1bg4qRYweoOKso:jpK70moJQ4iaouo
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
order enquiry PDF.vbs
Resource
win7-20240215-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
order enquiry PDF.vbs
Resource
win10v2004-20240226-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target order enquiry PDF.vbs
- Size 563KB
- SHA256 9f586373713feb004b4bc48a2b41962933f4f4d0fd44dc2c9d402e3bfdfffef0
- MD5 cc54a0d7c9fbdf633b6bd2f8613e179c
- SHA1 721eec20349534de85d4feaef4fb32064aba11ee
- SHA512 6c2bfdbfada7007520793a9166bc1cb23b893081bd07d5b29f72a8797baeff7e983c0c4bee47de68406473e18b4dbbfe0272a7e0b45ab42bafe5279a0d3e233e
- SSDEEP 12288:jfdS6w2qbNnbk1a7X4dLmoJH8Q1bg4qRYweoOKso:jpK70moJQ4iaouo
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Suspicious use of SetThreadContext