Extracted

• • Target

    06092024_0243_Documentos Confidenciales anexos por parte de la Fiscalía General De La Nación .vbs

  • Size

    29.8MB

  • MD5

    4cc915c8a7fae19c3a9b1eb9a7552fcf

  • SHA1

    46bce2ba0c580f021726fdcde7b67d1cb9f6a934

  • SHA256

    d7ef8e4b2c2c9e97bf2c7d0f5005e1174f52e98de82d8ffd30e62876e1bf25cc

  • SHA512

    c27d6b81d066b1f0937ab5edb9f9bb0f812ad28f876706422c852f8372bc52c25a7cc4e55ed4f52e43640f5fcd03dcde7c9a5f065f0a82bc43d723dc391c8c32

  • SSDEEP

    1536:UYYYYYYYYYYYYYYYYYYYYYYYYYYYYwYYYYYYYYYYYYYYYYYYYYYYYYYYYYkYYYYc:Kc

  Score

  10^/10

  execution

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2