General
- Target 5b679e7350067248c1a890f198155e4cf794d620a654a7f7479829575799c15a.bin
- Size 426KB
- Sample260718-mtrd5agx7r
- SHA256 5b679e7350067248c1a890f198155e4cf794d620a654a7f7479829575799c15a
Score
8/10
Malware Config
Targets
-
- Target Resources/Statement.docx
- Size 35KB
- SHA256 a908db67b775605f6ec308df32cc4dc1eeb823e8abff23d6cd0ed077d06d8ad1
Score1/10 -
- Target Resources/cryptbase.dll
- Size 15KB
- SHA256 16ce3053788f812291fe4ff8e1efde3bb88aeb4f76f864e6a1fb702c4b60262e
Score1/10 -
- Target Resources/launcher.vbs
- Size 764B
- SHA256 7b38a845fbf9096953040449ae8811c58832517201d6f477cfc461323c6b86c3
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.
-
- Target Resources/run.ps1
- Size 3KB
- SHA256 b7c786afd43b46aceedecca23fe3b74110f82db61a97d3939c8e6908699d6a32
Score3/10 -
- Target Акт сверки 2026.docx.lnk
- Size 1KB
- SHA256 1781b2f00a0df7a3010fc91e9cd2e62c5a26a73d88c3f486bd520bbb1af4e94a
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.