Extracted

• • Target

    Invio_File_5_2e1c05a00c25827239e33c13d5dfad97.vbs

  • Size

    2.0MB

  • MD5

    9f27498cc3e4c9551b2a09b80a695e20

  • SHA1

    7be68189f366989b40ddcbdb65a73e71af752755

  • SHA256

    a35d561f3a00760bb2da5329c72ca4e7d6c30a5f81c8bb2af508f4d468c86855

  • SHA512

    68858adb77479ffb7f9bd69869e5be06d7c7c8424e3e657b51d01afac61dc3af640a3fbce75d98d4413ff310ae214b90d65a6ae61ad9f15f036a542f4003c941

  • SSDEEP

    192:MVp2kmF6uwAS6X9OHrNRL7Qf8i9hwuH7+o4kXpyHHxi:M72kmF7wAOL/Qf8xTcXcxi

  Score

  10^/10

  execution

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Command and Scripting Interpreter: PowerShell

    Start PowerShell.

    execution

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2