fef93a4338e2e7440eba896964e754d68f7de3c662683c06c85f1d3284af94d8 | Triage

Sharing

General

Target

file01.vbs
Size

365B
Sample

240904-mgdmhayaln
MD5

01ef1554ec21731fdeed186990481ebc
SHA1

7f923fe153ccf1317f29aca0697291365ad71a1e
SHA256

fef93a4338e2e7440eba896964e754d68f7de3c662683c06c85f1d3284af94d8
SHA512

9d2efdcebcf0b07473cbf399b8e4cdde23bc1b60c325eaca72e221dd7dee43273b252b6b530d8677d55d14b3ecdfce7467c60b6b9b677ca724b34437a10ed974

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  file01.vbs
- Size
  
  365B
- MD5
  
  01ef1554ec21731fdeed186990481ebc
- SHA1
  
  7f923fe153ccf1317f29aca0697291365ad71a1e
- SHA256
  
  fef93a4338e2e7440eba896964e754d68f7de3c662683c06c85f1d3284af94d8
- SHA512
  
  9d2efdcebcf0b07473cbf399b8e4cdde23bc1b60c325eaca72e221dd7dee43273b252b6b530d8677d55d14b3ecdfce7467c60b6b9b677ca724b34437a10ed974
Score

8^/10

discovery exploit
- Possible privilege escalation attempt
  exploit
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Modifies file permissions
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit