General
- Target A2_17.2.vbs
- Size 688KB
- Sample260721-j229tab12y
- SHA256 110e61767d8affad2b2a1f6fea2749664864e73a380782240765d2f3cbec95d5
- MD5 76b597ea95f2d7c6e375d4d21deb133a
- SHA1 46640229570e8fbf8d0b7bcf3f0524b968183fe4
- SHA512 acf32961b0420e475f27bd5c5ff73813ad3613bf36a6d975919a43ed920f6940cbcb34540af2200dc73d19de2b019267a477f9e565b7716ff5adde0c7ba5dc13
- SSDEEP 384:qvvS9V41BiBOYkKcQVCcBJH5cQecEOkMEeVB79z03BOB7egBrMOQWBQBQ1OciBOu:GrQ1EnnrSt/JAWTgTSIv9VbrAXL6
- TLSH T178E4C4590E9FDF8CB4A6D78FDFDCBF00F5E10CBE197941A982A66558912295C08EFC20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
A2_17.2.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
A2_17.2.vbs
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target A2_17.2.vbs
- Size 688KB
- SHA256 110e61767d8affad2b2a1f6fea2749664864e73a380782240765d2f3cbec95d5
- MD5 76b597ea95f2d7c6e375d4d21deb133a
- SHA1 46640229570e8fbf8d0b7bcf3f0524b968183fe4
- SHA512 acf32961b0420e475f27bd5c5ff73813ad3613bf36a6d975919a43ed920f6940cbcb34540af2200dc73d19de2b019267a477f9e565b7716ff5adde0c7ba5dc13
- SSDEEP 384:qvvS9V41BiBOYkKcQVCcBJH5cQecEOkMEeVB79z03BOB7egBrMOQWBQBQ1OciBOu:GrQ1EnnrSt/JAWTgTSIv9VbrAXL6
- TLSH T178E4C4590E9FDF8CB4A6D78FDFDCBF00F5E10CBE197941A982A66558912295C08EFC20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.