Overview

overview

8

Static

static

1

triage_ult.vbs

windows10-2004-x64

8

triage_ult.vbs

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    triage_ult.vbs
  • Size 924B
  • Sample260716-wbas4ad16w
  • SHA256 2fdcabe4f39b99aa289ff00ff22ec49a578a3e9093e30bd06621b3466f56415e
  • MD5 SHA1 SHA512 TLSH
Score
8/10
defense_evasiondropperexecutionpersistence

Malware Config

Targets

    • Target
      triage_ult.vbs
    • Size 924B
    • SHA256 2fdcabe4f39b99aa289ff00ff22ec49a578a3e9093e30bd06621b3466f56415e
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    defense_evasiondropperexecutionpersistence

    • Download via BitsAdmin

      dropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks