General
- Target script.vbs
- Size 535B
- Sample260717-wpap9ahv5p
- SHA256 236f8666a5eb22b3a8841d33aa1e476f694bf5409649a73819b2e6863359e318
- MD5 cea382b2edc8e196ab28b1fd0e5e8fcb
- SHA1 33fff7ecf0ba2c53244956c9f4741c95c5057ba7
- SHA512 2904aabc27b0807984c442127e1afc3604a1333ddc4b33447455033b488a42db2054436382263237d45d65b2ae5d3968e61969e8dad6ee73a940003edec69eba
- TLSH T11EF0E9D37D0690625632DABA0653A844D114C01780AAAE053E9C9581BF3379C58C44AC
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
script.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
script.vbs
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target script.vbs
- Size 535B
- SHA256 236f8666a5eb22b3a8841d33aa1e476f694bf5409649a73819b2e6863359e318
- MD5 cea382b2edc8e196ab28b1fd0e5e8fcb
- SHA1 33fff7ecf0ba2c53244956c9f4741c95c5057ba7
- SHA512 2904aabc27b0807984c442127e1afc3604a1333ddc4b33447455033b488a42db2054436382263237d45d65b2ae5d3968e61969e8dad6ee73a940003edec69eba
- TLSH T11EF0E9D37D0690625632DABA0653A844D114C01780AAAE053E9C9581BF3379C58C44AC
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)
-
Executes a VBScript file via the Windows Script Host.