Overview

overview

7

Static

static

1

target.vbs

windows7-x64

7

target.vbs

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    target.vbs

  • Size

    13KB

  • Sample

    240415-r1tv2sba7y

  • MD5

    e7285d36cba6ed94e5e5b7693b56c616

  • SHA1

    9b7c8a5196320684f7c527a31629c59c5ff854c9

  • SHA256

    ce568ccd06b4a3241a151d20ba596df42dc0070a5997d0f61d3e0b3a6437a8f9

  • SHA512

    c1cfb461f173c041d268fa5611cd434a6424abe0e9d8d9190701767be5f7735b2ee1bff82e3a5634c4408da2ade3d2aebd9b58e057b37c4b3069a9d890453543

  • SSDEEP

    384:DzzVqiGagRYwZSFFOECXCghDSHXWmZg1r+9f7qN:DzxqagRYwZSGECXCgMmsgV/N

Score
7/10
persistence

Malware Config

Targets

    • Target

      target.vbs

    • Size

      13KB

    • MD5

      e7285d36cba6ed94e5e5b7693b56c616

    • SHA1

      9b7c8a5196320684f7c527a31629c59c5ff854c9

    • SHA256

      ce568ccd06b4a3241a151d20ba596df42dc0070a5997d0f61d3e0b3a6437a8f9

    • SHA512

      c1cfb461f173c041d268fa5611cd434a6424abe0e9d8d9190701767be5f7735b2ee1bff82e3a5634c4408da2ade3d2aebd9b58e057b37c4b3069a9d890453543

    • SSDEEP

      384:DzzVqiGagRYwZSFFOECXCghDSHXWmZg1r+9f7qN:DzxqagRYwZSGECXCgMmsgV/N

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks