General
- Target H1.vbs
- Size 2KB
- Sample260721-phv92sbl4t
- SHA256 41d9103bcb900b5f208ae26cb2e414fecfc9c72032b8b0e8afef2c7e405c8b16
- MD5 6c388c8777fd08afa68624bce2b8c82f
- SHA1 2ed11093410244d1e43df64b5e36c50247efa84d
- SHA512 c0564cc9eddb49efa1125723e7a66d404532476d14b962cddd6cdb1ed5669d15e32adbba7c228b86efd90aaab7a661616df6708e0a61f0c69735e3b2e6dfe0e9
- TLSH T17941131FDD2BC6B8835AC1927AF5880D9A9143630C63AC34FEBC45546F7457CE3E2686
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
H1.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target H1.vbs
- Size 2KB
- SHA256 41d9103bcb900b5f208ae26cb2e414fecfc9c72032b8b0e8afef2c7e405c8b16
- MD5 6c388c8777fd08afa68624bce2b8c82f
- SHA1 2ed11093410244d1e43df64b5e36c50247efa84d
- SHA512 c0564cc9eddb49efa1125723e7a66d404532476d14b962cddd6cdb1ed5669d15e32adbba7c228b86efd90aaab7a661616df6708e0a61f0c69735e3b2e6dfe0e9
- TLSH T17941131FDD2BC6B8835AC1927AF5880D9A9143630C63AC34FEBC45546F7457CE3E2686
- MD5 SHA1 SHA512 TLSH
-
Download via BitsAdmin
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.