General
- Target New_Approved_statementsss.zip
- Size 364B
- Sample260709-qqw2zsbv2l
- SHA256 9cd3b1a914ddf1f9aed9758c61153f47ad1c842941ce753f0bda774a71a834b2
Score
8/10
Malware Config
Targets
-
- Target New_Approved_statements.vbs
- Size 267B
- SHA256 3d723b1328c7af2a1fccecbf26462abe18718440571a512089e3f4dc4478d2b5
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Use of msiexec (install) with remote resource
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.