General
- Target TJIJO98726Convncn_7HEUIourno69997-AVRY6H8-copiaH.vbs
- Size 4.1MB
- Sample260415-d3s5msd14p
- SHA256 3415d1677e93d4a3bcc8bff5ba8db56d3d101d3c8d942cef4efb48487308afb9
- MD5 bfe787d0d5ae5f3dce3a187dea6d597f
- SHA1 10bd2abf30c7db39e790d94cfe8923789555eec9
- SHA512 0cb6ce71aedb7fda48bf51d463ac36e4c6db7d9cda345fb1ca73c01c0454a2dbc822dd9398c7d08485709cec937ce3dc3ae5e20c60585ce17998636b0e979ccb
- SSDEEP 49152:V5+UKqurGteHxAbIjq5ynOQxozNtt29e7Xd0fV93o5qUlZboP/00g2Eyw:T
- TLSH T17B163334F798185B07E4872AF05FAF337FE789A3424C68A6D459E04D25CBAB5812F4E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
TJIJO98726Convncn_7HEUIourno69997-AVRY6H8-copiaH.vbs
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
TJIJO98726Convncn_7HEUIourno69997-AVRY6H8-copiaH.vbs
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target TJIJO98726Convncn_7HEUIourno69997-AVRY6H8-copiaH.vbs
- Size 4.1MB
- SHA256 3415d1677e93d4a3bcc8bff5ba8db56d3d101d3c8d942cef4efb48487308afb9
- MD5 bfe787d0d5ae5f3dce3a187dea6d597f
- SHA1 10bd2abf30c7db39e790d94cfe8923789555eec9
- SHA512 0cb6ce71aedb7fda48bf51d463ac36e4c6db7d9cda345fb1ca73c01c0454a2dbc822dd9398c7d08485709cec937ce3dc3ae5e20c60585ce17998636b0e979ccb
- SSDEEP 49152:V5+UKqurGteHxAbIjq5ynOQxozNtt29e7Xd0fV93o5qUlZboP/00g2Eyw:T
- TLSH T17B163334F798185B07E4872AF05FAF337FE789A3424C68A6D459E04D25CBAB5812F4E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE