Overview

overview

8

Static

static

1

xyz.hta

windows10-2004-x64

8

Resubmissions

09/11/2024, 00:18

241109-alx6gstamn8

09/11/2024, 00:13

241109-ah3a2ashpp8

Sharing

Copy URL Twitter E-mail

General

  • Target
    xyz.vbs
  • Size 74KB
  • Sample241109-ah3a2ashpp
  • SHA256 92a8cc4e385f170db300de8d423686eeeec72a32475a9356d967bee9e3453138
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
googlediscoverydropperphishing

Malware Config

Targets

    • Target
      xyz.vbs
    • Size 74KB
    • SHA256 92a8cc4e385f170db300de8d423686eeeec72a32475a9356d967bee9e3453138
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    googlediscoverydropperphishing

    • Blocklisted process makes network request

    • Download via BitsAdmin

      dropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Detected potential entity reuse from brand GOOGLE.

      phishinggoogle
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks