General
- Target bot.vbe
- Size 1KB
- Sample260803-bggtdaab58
- SHA256 0d3015b47a649e5a04ca1ca2ad0506c711efd47ef9f44e689063a77a07c7bcf8
- MD5 e01a06b088b4a328747165cab787d25b
- SHA1 89a8df1c53703555365d25921820c34b49de8615
- SHA512 f5f148ea4b5bd13c09fbfd27770ec6597eaf9fb218e4e26f37b6eb1ab61f3313d53933cb28ecb7123e34d6889b2c7c4e49012a546f2a9e159a569f0b57cfc8db
- TLSH T1C911B5A603FEC3EE0969241BD26CAFB600321D24998820D89A04BC5F9B58E08C5B3D32
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
bot.vbe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
bot.vbe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target bot.vbe
- Size 1KB
- SHA256 0d3015b47a649e5a04ca1ca2ad0506c711efd47ef9f44e689063a77a07c7bcf8
- MD5 e01a06b088b4a328747165cab787d25b
- SHA1 89a8df1c53703555365d25921820c34b49de8615
- SHA512 f5f148ea4b5bd13c09fbfd27770ec6597eaf9fb218e4e26f37b6eb1ab61f3313d53933cb28ecb7123e34d6889b2c7c4e49012a546f2a9e159a569f0b57cfc8db
- TLSH T1C911B5A603FEC3EE0969241BD26CAFB600321D24998820D89A04BC5F9B58E08C5B3D32
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.