General
- Target D2_28_1.vbs
- Size 69KB
- Sample260721-k4cbvac191
- SHA256 b884439fd97f9fb25ba9db09df388cc24b746abd3d99d0dde93645559e20c6aa
- MD5 7e944add12a21d00405541b486adc12a
- SHA1 1d5e1a36183aefa652af7dd64dd7bbc15f61b170
- SHA512 f68f53e72fafa6c6ed3dd290605e253427fb4e0a541c4241b2450f2e6095cdea5853698c54b14436073b0ffa9c4a5f5beb47a83ed18883fd5126e366cdbd1120
- SSDEEP 384:6XrHMP3GynvbTRmmIXnDx6bua0pRSIKCt9RZ0sYH9OfIgm:hbubi
- TLSH T13663A5D673865BACBCE09CD30158900A69F8F9673F110579FAE2C7ABE53AD00BC51A71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
D2_28_1.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
D2_28_1.vbs
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target D2_28_1.vbs
- Size 69KB
- SHA256 b884439fd97f9fb25ba9db09df388cc24b746abd3d99d0dde93645559e20c6aa
- MD5 7e944add12a21d00405541b486adc12a
- SHA1 1d5e1a36183aefa652af7dd64dd7bbc15f61b170
- SHA512 f68f53e72fafa6c6ed3dd290605e253427fb4e0a541c4241b2450f2e6095cdea5853698c54b14436073b0ffa9c4a5f5beb47a83ed18883fd5126e366cdbd1120
- SSDEEP 384:6XrHMP3GynvbTRmmIXnDx6bua0pRSIKCt9RZ0sYH9OfIgm:hbubi
- TLSH T13663A5D673865BACBCE09CD30158900A69F8F9673F110579FAE2C7ABE53AD00BC51A71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.