Resubmissions
02/03/2025, 16:58
250302-vgylnsyxgs416/02/2025, 17:47
250216-wc9ntatqdl801/02/2025, 18:23
250201-w1nq9awqaj1001/02/2025, 18:11
250201-wsp94swmbr801/02/2025, 10:22
250201-melv4azmbr330/01/2025, 14:17
250130-rl1p2svran830/01/2025, 14:14
250130-rkdh5atkes411/01/2025, 14:29
250111-rtkc2a1nbv818/11/2024, 19:25
241118-x5frwatjhx113/11/2024, 17:14
241113-vr54havqay8General
- Target sample
- Size 83KB
- Sample250130-rl1p2svran
- SHA256 1f5e6d6258b3bd00503b25e1ac0787e3fe7a454af0986283f61a307811f2e8db
- MD5 d303f7f7594ddd6ee31b782cf5aa8bd3
- SHA1 b32d5a7987bb114dc4d1fc565b6197aa712ce683
- SHA512 5234bdba18e35f2f109838260583ab06ec1530380e21a308bd8b6959c68306f67ead62b8e153c70c47fa6c13a0e6f1a415f12610e76c99eb1578c052f31fcd1b
- SSDEEP 1536:hqcEYq4NOFYLIjfN08KQkeSVN0NtsLtzRRWXK8YR+:wcEYqmOJfstzjH5+
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
sample.js
Resource
win10ltsc2021-20250128-en
23 signatures
900 seconds
Malware Config
Targets
-
- Target sample
- Size 83KB
- SHA256 1f5e6d6258b3bd00503b25e1ac0787e3fe7a454af0986283f61a307811f2e8db
- MD5 d303f7f7594ddd6ee31b782cf5aa8bd3
- SHA1 b32d5a7987bb114dc4d1fc565b6197aa712ce683
- SHA512 5234bdba18e35f2f109838260583ab06ec1530380e21a308bd8b6959c68306f67ead62b8e153c70c47fa6c13a0e6f1a415f12610e76c99eb1578c052f31fcd1b
- SSDEEP 1536:hqcEYq4NOFYLIjfN08KQkeSVN0NtsLtzRRWXK8YR+:wcEYqmOJfstzjH5+
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Uses the VBS compiler for execution