Overview

overview

8

Static

static

1

6af8cef581...7d.vbs

windows7-x64

8

6af8cef581...7d.vbs

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    2ad1c6a615270f430e34d4fcfa6c3245.bin
  • Size 402KB
  • Sample240530-b8cnqsbb73
  • SHA256 bb72dcce66a3a30a5223cf1c436d4ae9b1ef0e937f38300925e279a86cc89bf2
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Targets

    • Target
      6af8cef5811fe0f2d7d36c23a0180b6aa1ab7f66ca39c6a2b513f85a9bb5817d.vbs
    • Size 1.1MB
    • SHA256 6af8cef5811fe0f2d7d36c23a0180b6aa1ab7f66ca39c6a2b513f85a9bb5817d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks