General
- Target trigger.vbs
- Size 122B
- Sample240821-slbxcsvhla
- SHA256 716cd075754ecccc107cda41d8e2dab25379970fc768e60cf9e1f2aa85940dcf
- MD5 1347fda5e38458b268ab2da5a138bc0d
- SHA1 253960367364d3e9dd0bb10086ff36df72c22ea4
- SHA512 9e7a1d16991c9b32f8c01de1e08ffb3afd8a9de10d756aa53f33b7885a5e8d8aba4e489fb1e5e1e1742e8096607e552f132534da8c63b247dc1104b784aac201
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
trigger.vbs
Resource
win7-20240705-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target trigger.vbs
- Size 122B
- SHA256 716cd075754ecccc107cda41d8e2dab25379970fc768e60cf9e1f2aa85940dcf
- MD5 1347fda5e38458b268ab2da5a138bc0d
- SHA1 253960367364d3e9dd0bb10086ff36df72c22ea4
- SHA512 9e7a1d16991c9b32f8c01de1e08ffb3afd8a9de10d756aa53f33b7885a5e8d8aba4e489fb1e5e1e1742e8096607e552f132534da8c63b247dc1104b784aac201
- MD5 SHA1 SHA512
-
Possible privilege escalation attempt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Modifies file permissions