General
- Target GT105780002.7z
- Size 7KB
- Sample260724-p3w23sem4x
- SHA256 d30ce0c1e266a2bc63ef081382d1a811c7dd03babb91eec1cc347fc1c2cb93bd
- MD5 dcb42627182a4cc615f98e431e34be7f
- SHA1 7d25ddfa0cda8ba203248549a5d4508d02299561
- SHA512 306ce9f889df21649f16109523af4c18d81f8e8388836d359c398307e5bd3d48973f3ef1b32a43e72fd88ce454268b7b6c0ffff86dfe7b4a47cac514153b206e
- SSDEEP 192:198UFZMdUJl2Mmz3lZJHX08A978dB47NnTNI4:H8SMKJMJ3lnEPNpD
- TLSH T1F8F17E5C7CF374CAEB96E3360B8871A0615561485127ADA89B0705906C4DC59BED64E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
GT105780002.vbs
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
GT105780002.vbs
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target GT105780002.vbs
- Size 18KB
- SHA256 2159a767cd13d668613dac36c5f83b416025e913f31fc9776093684c00adcf47
- MD5 254999d7df295d693c3d76d950e5f70a
- SHA1 efde5febc329dc562388e225c7a26d10745896c3
- SHA512 0057fffb5133e938f9c4fc4927e1a0f90114df99ae2c7c9d2f90469ae8b67bd1db81739e97b45aea62dc87f05339209dad10dbd7fb5367683de0bcd23fd301af
- SSDEEP 384:KfDn+XZbC0cMBMtl2VsqRbjv4wHn74W6IH5BmQ8ueBzmIA0igfv37AFwdC:KcFXdVQBzmIDvc6E
- TLSH T1E3829417890E8BF03939394DA5AFB815A910436D783B694A3D8FD1DD3FF66108BC30A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.