488e40c43fbc12918061da565d4ceecd65a66d99b29cf76bb9f0592071517087 | Triage

Sharing

General

Target

run.vbs
Size

2KB
Sample

240723-tgde3ayamq
MD5

5ae74ff8867e42a6a1a17fa89a653690
SHA1

c6063f2797ffc96b93a29c612bd833434896dcf6
SHA256

488e40c43fbc12918061da565d4ceecd65a66d99b29cf76bb9f0592071517087
SHA512

6d8cf57c197d2cd9ca9b9322bc7f8f1b2472bf60d87b6a16e5bd8400fc4c221cb0d8c62f2382a4f5dde386e905df430e58cfde04874a0dc76daf65de94fa826e

Score

7^/10

execution

Malware Config

Targets

- Target
  
  run.vbs
- Size
  
  2KB
- MD5
  
  5ae74ff8867e42a6a1a17fa89a653690
- SHA1
  
  c6063f2797ffc96b93a29c612bd833434896dcf6
- SHA256
  
  488e40c43fbc12918061da565d4ceecd65a66d99b29cf76bb9f0592071517087
- SHA512
  
  6d8cf57c197d2cd9ca9b9322bc7f8f1b2472bf60d87b6a16e5bd8400fc4c221cb0d8c62f2382a4f5dde386e905df430e58cfde04874a0dc76daf65de94fa826e
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2