56d3004b7b6c251b025cd339067ff7a169a6fcc4d7b3f879c23d303a54d263ae | Triage

Sharing

General

Target

file.vbs
Size

69B
Sample

240425-p57xcsah4v
MD5

1109e8a5bcfa03f3d1ada2e9d8c98f3f
SHA1

6c9cbf78741d05235223fa1dd74575c721f49fbb
SHA256

56d3004b7b6c251b025cd339067ff7a169a6fcc4d7b3f879c23d303a54d263ae
SHA512

d08f1943df69315e9415f90627eb6fdf94a8258c56553aea29eb0fcc1fe79b5b58e68e3ea73992834031830a126aaab2ead03064c33807a03c195aade50de733

Score

7^/10

Malware Config

Targets

- Target
  
  file.vbs
- Size
  
  69B
- MD5
  
  1109e8a5bcfa03f3d1ada2e9d8c98f3f
- SHA1
  
  6c9cbf78741d05235223fa1dd74575c721f49fbb
- SHA256
  
  56d3004b7b6c251b025cd339067ff7a169a6fcc4d7b3f879c23d303a54d263ae
- SHA512
  
  d08f1943df69315e9415f90627eb6fdf94a8258c56553aea29eb0fcc1fe79b5b58e68e3ea73992834031830a126aaab2ead03064c33807a03c195aade50de733
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2