General
- Target VOICE-MAIL.zip
- Size 1KB
- Sample260724-pfbsmazbpd
- SHA256 4acfa8b24aa4f32b31fc584456660e3de98a69bcc4c1e8be1477326c398ea991
Score
8/10
Malware Config
Targets
-
- Target VOICE-MAIL.vbs
- Size 9KB
- SHA256 f212271b0b43e80ed845aa34bf1f420ed2e9668b2642f4c0347979d250e2e3e9
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Visual Basic
1Windows Command Shell
1