Resubmissions

02/03/2025, 16:58

250302-vgylnsyxgs4

16/02/2025, 17:47

250216-wc9ntatqdl8

01/02/2025, 18:23

250201-w1nq9awqaj10

01/02/2025, 18:11

250201-wsp94swmbr8

01/02/2025, 10:22

250201-melv4azmbr3

30/01/2025, 14:17

250130-rl1p2svran8

30/01/2025, 14:14

250130-rkdh5atkes4

11/01/2025, 14:29

250111-rtkc2a1nbv8

18/11/2024, 19:25

241118-x5frwatjhx1

13/11/2024, 17:14

241113-vr54havqay8

General

  • Target
    sample
  • Size 83KB
  • Sample250130-rl1p2svran
  • SHA256 1f5e6d6258b3bd00503b25e1ac0787e3fe7a454af0986283f61a307811f2e8db
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      sample
    • Size 83KB
    • SHA256 1f5e6d6258b3bd00503b25e1ac0787e3fe7a454af0986283f61a307811f2e8db
    • MD5 SHA1 SHA512 SSDEEP
    • Disables Task Manager via registry modification

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks