Overview

overview

7

Static

static

1

file.vbs

windows7-x64

4

file.vbs

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.vbs

  • Size

    933B

  • Sample

    240421-p6s5labh85

  • MD5

    21107479a0b22f97279331776497f424

  • SHA1

    d7661427c9ba6a05d1a3fac3738db427b21473c7

  • SHA256

    5c9a27645f428c4479f33cab9c05f70a6b6778b902a2cb53842d7506918d1c93

  • SHA512

    e05374e11edff902eaaee3101e2bd8d19f6b92663b97ba8cb3c5dd8843607c04d78fc29782bf9f558a6c66392bf2f635085a2fedc760d41cc923a70bb248cc81

Score
7/10

Malware Config

Targets

    • Target

      file.vbs

    • Size

      933B

    • MD5

      21107479a0b22f97279331776497f424

    • SHA1

      d7661427c9ba6a05d1a3fac3738db427b21473c7

    • SHA256

      5c9a27645f428c4479f33cab9c05f70a6b6778b902a2cb53842d7506918d1c93

    • SHA512

      e05374e11edff902eaaee3101e2bd8d19f6b92663b97ba8cb3c5dd8843607c04d78fc29782bf9f558a6c66392bf2f635085a2fedc760d41cc923a70bb248cc81

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks