ba00e6b4b561806e03e8e70b555ec2c9c9a0aedb81cd5d062842b446a955f5bd | Triage

Sharing

General

Target

run.vbs
Size

513B
Sample

240906-pdx8vawdpe
MD5

b9662bec4455bca7eaeb4d087ba7dd7f
SHA1

16d36fa0020b7d4643ed7d1adb09db7a38089163
SHA256

ba00e6b4b561806e03e8e70b555ec2c9c9a0aedb81cd5d062842b446a955f5bd
SHA512

31b3a47afc1da158bb7997586b88ebb80978651b2532db284a3032a2aefd6d5e74aab554a2cde569530e6aa982c458759ba2348854cde6133b8585b8cca2c44a

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  run.vbs
- Size
  
  513B
- MD5
  
  b9662bec4455bca7eaeb4d087ba7dd7f
- SHA1
  
  16d36fa0020b7d4643ed7d1adb09db7a38089163
- SHA256
  
  ba00e6b4b561806e03e8e70b555ec2c9c9a0aedb81cd5d062842b446a955f5bd
- SHA512
  
  31b3a47afc1da158bb7997586b88ebb80978651b2532db284a3032a2aefd6d5e74aab554a2cde569530e6aa982c458759ba2348854cde6133b8585b8cca2c44a
Score

8^/10

discovery exploit
- Possible privilege escalation attempt
  exploit
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Modifies file permissions
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit