General
- Target po20262306.vbs
- Size 434KB
- Sample260624-pg4vssb17l
- SHA256 978df19834c1ffe8ea60378f280d0f45cf8463dd7987f74b1aac1318a0bfb8d2
- MD5 a00f53b9f25ee81936f4463afeb48b3f
- SHA1 f5e81b9beb21b274ab12b97ad124d4453c55844a
- SHA512 a32212d7da5f2db20011e5849fccd14bc6cd417d7cabf28d603a89e9a05bd41477ae8d3a4d862ec61a4d6f3e6f2030af8051c62b42fb8b3b86ae9dafaf162d3d
- SSDEEP 12288:zh2xqOPnPwTRFn1HkuOxL0RiIdmBFTxP5ICAiR:zQjPA/YJkCNR
- TLSH T18E940B34ACEA502B71B3EE59CAD4B697E99FB663370E581D109303CA4713942EDC263D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
po20262306.vbs
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
po20262306.vbs
Resource
win11ltsc2024-20260617-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target po20262306.vbs
- Size 434KB
- SHA256 978df19834c1ffe8ea60378f280d0f45cf8463dd7987f74b1aac1318a0bfb8d2
- MD5 a00f53b9f25ee81936f4463afeb48b3f
- SHA1 f5e81b9beb21b274ab12b97ad124d4453c55844a
- SHA512 a32212d7da5f2db20011e5849fccd14bc6cd417d7cabf28d603a89e9a05bd41477ae8d3a4d862ec61a4d6f3e6f2030af8051c62b42fb8b3b86ae9dafaf162d3d
- SSDEEP 12288:zh2xqOPnPwTRFn1HkuOxL0RiIdmBFTxP5ICAiR:zQjPA/YJkCNR
- TLSH T18E940B34ACEA502B71B3EE59CAD4B697E99FB663370E581D109303CA4713942EDC263D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.