General
- Target D2_29_3.vbs
- Size 79KB
- Sample260721-k4c85sds2s
- SHA256 01a810c540a75e45cd0584a22a4fbc1579ab62ce05fe156ee78ccfd7b308cc4e
- MD5 20c969c96a65add976b386d8536e9d1c
- SHA1 2e511171bd705b064b30db2c2e9069aa2909b69d
- SHA512 83021c957859dee4f10559ba3cada36d4df34eeac063a74799453c70374181815063d6383d2cbdec27d77a0f0474a2cdb94d963103f7237e334928880acf9e2b
- SSDEEP 384:xpVGy+aolgg3Ms+MIG2RcN7aAv3GZPOn2nr:xpINaolgg3//2ON7gZPcE
- TLSH T13E8376C4858A3B74F9DD0F84D44B054E90FAA979A9510281EFB73AA76C33DC8C4B1B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
D2_29_3.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
D2_29_3.vbs
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target D2_29_3.vbs
- Size 79KB
- SHA256 01a810c540a75e45cd0584a22a4fbc1579ab62ce05fe156ee78ccfd7b308cc4e
- MD5 20c969c96a65add976b386d8536e9d1c
- SHA1 2e511171bd705b064b30db2c2e9069aa2909b69d
- SHA512 83021c957859dee4f10559ba3cada36d4df34eeac063a74799453c70374181815063d6383d2cbdec27d77a0f0474a2cdb94d963103f7237e334928880acf9e2b
- SSDEEP 384:xpVGy+aolgg3Ms+MIG2RcN7aAv3GZPOn2nr:xpINaolgg3//2ON7gZPcE
- TLSH T13E8376C4858A3B74F9DD0F84D44B054E90FAA979A9510281EFB73AA76C33DC8C4B1B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.