General
- Target target.vbs
- Size 527B
- Sample260717-wpmd2shv7l
- SHA256 ecaa2131c22d1acfb4939a3e5c6c3f95ca9df7ce0658a8af02d638b3a341de83
- MD5 bf13377e273a48bbb772d9bd00011bf1
- SHA1 cea54913ad7ddab2a842884e7e60e1823a103734
- SHA512 aaa4dde0cc4dd3f93ba8daf4304d4a6ad6632063c9ad8fc8a3a1030e60b8a14f78b768c7c771798995d017f1d7f98ffae92731f4511c03e1f1da42f7d94f7b43
- TLSH T145F0E9D37D0690625632DABA0653F844D114C11781AAAE053E9C9581BF3379C58C44AC
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
target.vbs
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
target.vbs
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target target.vbs
- Size 527B
- SHA256 ecaa2131c22d1acfb4939a3e5c6c3f95ca9df7ce0658a8af02d638b3a341de83
- MD5 bf13377e273a48bbb772d9bd00011bf1
- SHA1 cea54913ad7ddab2a842884e7e60e1823a103734
- SHA512 aaa4dde0cc4dd3f93ba8daf4304d4a6ad6632063c9ad8fc8a3a1030e60b8a14f78b768c7c771798995d017f1d7f98ffae92731f4511c03e1f1da42f7d94f7b43
- TLSH T145F0E9D37D0690625632DABA0653F844D114C11781AAAE053E9C9581BF3379C58C44AC
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)
-
Executes a VBScript file via the Windows Script Host.