dd37c75a0da7c3be6f4dc3594cf7bd3460200593664a5344eb0c9120ef61d86f | Triage

Sharing

General

Target

vbs.vbs
Size

1KB
Sample

240415-3s3c1ade6z
MD5

239bbcf5668cd4778530d27aa4a50d3a
SHA1

694809c0a1c739bc85d9790460153caff768b71f
SHA256

dd37c75a0da7c3be6f4dc3594cf7bd3460200593664a5344eb0c9120ef61d86f
SHA512

08f1f2437286743964142fafe6db8c62e02e2cfbdeb5b9842a1f555bc00cb615b8fc98dc355067045a20afbbc3d60b09c61018ead2407105cce2e9c877440057

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  vbs.vbs
- Size
  
  1KB
- MD5
  
  239bbcf5668cd4778530d27aa4a50d3a
- SHA1
  
  694809c0a1c739bc85d9790460153caff768b71f
- SHA256
  
  dd37c75a0da7c3be6f4dc3594cf7bd3460200593664a5344eb0c9120ef61d86f
- SHA512
  
  08f1f2437286743964142fafe6db8c62e02e2cfbdeb5b9842a1f555bc00cb615b8fc98dc355067045a20afbbc3d60b09c61018ead2407105cce2e9c877440057
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2