General
- Target script.vbs
- Size 1KB
- Sample260717-w3vbtaaw2p
- SHA256 b5bed5199dcc80345af6c2a5748676b2d9cc523471a2cb3be9ef8b5f3f9a806e
Score
10/10
Malware Config
Targets
-
- Target script.vbs
- Size 1KB
- SHA256 b5bed5199dcc80345af6c2a5748676b2d9cc523471a2cb3be9ef8b5f3f9a806e
Score10/10-
UAC bypass
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Possible privilege escalation attempt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Modifies file permissions
-
Checks whether UAC is enabled
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1File and Directory Permissions Modification
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2