General
- Target C2_28.5.vbs
- Size 31KB
- Sample260721-k358jac181
- SHA256 554d221f63802fde6f76518ee56b123f3d57fc7e54db70441f50a32ce2930a5b
- MD5 5c64f53d86caa5e3583cea7a6c2dcb8e
- SHA1 6ac8fd3e4476f32c7f35bdb73e167c66652d6f66
- SHA512 3d2d0530487c3c60377db3aca60637e3bba482beb7a498c36f81c216a41cee7209cadd80b8ba85366ae396113838c9a68e724d069e7930b6b74bc06eaba94460
- SSDEEP 384:vfvdLO1WI55DDkQXjS+b/tNSTD2ly427of/pQ:lLm5p/tNSTu5xQ
- TLSH T16CE2048958457C5B38BC3EF97CC670BBD24E85EA039420542DC9881E810F79DE9DDAE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
C2_28.5.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
C2_28.5.vbs
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target C2_28.5.vbs
- Size 31KB
- SHA256 554d221f63802fde6f76518ee56b123f3d57fc7e54db70441f50a32ce2930a5b
- MD5 5c64f53d86caa5e3583cea7a6c2dcb8e
- SHA1 6ac8fd3e4476f32c7f35bdb73e167c66652d6f66
- SHA512 3d2d0530487c3c60377db3aca60637e3bba482beb7a498c36f81c216a41cee7209cadd80b8ba85366ae396113838c9a68e724d069e7930b6b74bc06eaba94460
- SSDEEP 384:vfvdLO1WI55DDkQXjS+b/tNSTD2ly427of/pQ:lLm5p/tNSTu5xQ
- TLSH T16CE2048958457C5B38BC3EF97CC670BBD24E85EA039420542DC9881E810F79DE9DDAE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.