General
- Target a58a19cd6682b4f03de9e98c752f3ea25df7e10495e0551a0fd2784dcc104cef
- Size 180KB
- Sample260731-ed3hfscc32
- SHA256 a58a19cd6682b4f03de9e98c752f3ea25df7e10495e0551a0fd2784dcc104cef
Score
8/10
Malware Config
Targets
-
- Target Bank Return Report..vbs
- Size 422KB
- SHA256 f6e4ab9f347e1681750b650b5d87fe88e28932cef598b717ca35112c30377eaa
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Executes a VBScript file via the Windows Script Host.