Overview

overview

8

Static

static

1

run.vbs

windows7-x64

8

run.vbs

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    run.vbs

  • Size

    1KB

  • Sample

    240903-wjfz3steld

  • MD5

    4a12877f6d34551fd60bcf7069182ddd

  • SHA1

    346940791f044fcbc86d232b59a9f186690e343d

  • SHA256

    787d6b2a2247123768f676429c061b31c09f342f324f142d6e4b7c2c908e396d

  • SHA512

    f563bfb06bbed046cc7b996b27893ccd68b98db770046bc50b8630f71074c319da8416643351048c6c3d926375634ccdabb62ce1dacbe9f9b26f39a31d06a8b1

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      run.vbs

    • Size

      1KB

    • MD5

      4a12877f6d34551fd60bcf7069182ddd

    • SHA1

      346940791f044fcbc86d232b59a9f186690e343d

    • SHA256

      787d6b2a2247123768f676429c061b31c09f342f324f142d6e4b7c2c908e396d

    • SHA512

      f563bfb06bbed046cc7b996b27893ccd68b98db770046bc50b8630f71074c319da8416643351048c6c3d926375634ccdabb62ce1dacbe9f9b26f39a31d06a8b1

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks