General
- Target D2_29_2.vbs
- Size 38KB
- Sample260721-k4htmads3s
- SHA256 dd38482501a935ca1a657caf42f3c89a3740f51d4f1d55b0f520e1a8903027f7
- MD5 0e3c66056495e17ca771b785577f7ff8
- SHA1 12d56150dda6130618ebc8a3f9cdb96e8ac5c0a6
- SHA512 519d2153e449f58ce34e3bb4a9bedf166ad211483a2dfff71729571e7a145c8edf059eabcc6686dc4e8a3d855c09f423f3e4c9010b00773271556ab28a5062e8
- SSDEEP 384:rVOuc6sHA4FEEEEnLlAI6h+G3tIQnkUyD4:cucVHA4FEEEEnLlAI6/3tITUyD4
- TLSH T16603E0DBD1996F980E34E6A73F51138696522233C0780E756B139AC04E9AFD472BCCE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
D2_29_2.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
D2_29_2.vbs
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target D2_29_2.vbs
- Size 38KB
- SHA256 dd38482501a935ca1a657caf42f3c89a3740f51d4f1d55b0f520e1a8903027f7
- MD5 0e3c66056495e17ca771b785577f7ff8
- SHA1 12d56150dda6130618ebc8a3f9cdb96e8ac5c0a6
- SHA512 519d2153e449f58ce34e3bb4a9bedf166ad211483a2dfff71729571e7a145c8edf059eabcc6686dc4e8a3d855c09f423f3e4c9010b00773271556ab28a5062e8
- SSDEEP 384:rVOuc6sHA4FEEEEnLlAI6h+G3tIQnkUyD4:cucVHA4FEEEEnLlAI6/3tITUyD4
- TLSH T16603E0DBD1996F980E34E6A73F51138696522233C0780E756B139AC04E9AFD472BCCE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.