General
- Target zoom.vbs
- Size 42KB
- Sample260803-sgmhassema
- SHA256 04fc7818da3d609e6dec9122726d338adbce524786756d4b12e4352b743222db
- MD5 00e25db05ce4a4530f327bc9051abc94
- SHA1 71a931cf2a41f6a776ef276ed34af51eaaf69669
- SHA512 40638f3354d3b416eee01e159a64a5de71a277864aeaffacef6037f15e70f10b2dd434cb0295e935e7576f6f1c86a6e2c8b1d48894b12c4bc93ffb028c42c815
- SSDEEP 384:IHUL96ptFCu6XYQm4+ngnVJzWR9DqGmpJg6lQDf1X7oE9Hvr97t73H3em82PqfH0:sUsPWNoX9HzN9iRtC2OpK01
- TLSH T15813F0D20E34ED84B3D86939BDBC7560E3E0DEBB25B7A7611087E71E1B028462715B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
zoom.vbs
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
zoom.vbs
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target zoom.vbs
- Size 42KB
- SHA256 04fc7818da3d609e6dec9122726d338adbce524786756d4b12e4352b743222db
- MD5 00e25db05ce4a4530f327bc9051abc94
- SHA1 71a931cf2a41f6a776ef276ed34af51eaaf69669
- SHA512 40638f3354d3b416eee01e159a64a5de71a277864aeaffacef6037f15e70f10b2dd434cb0295e935e7576f6f1c86a6e2c8b1d48894b12c4bc93ffb028c42c815
- SSDEEP 384:IHUL96ptFCu6XYQm4+ngnVJzWR9DqGmpJg6lQDf1X7oE9Hvr97t73H3em82PqfH0:sUsPWNoX9HzN9iRtC2OpK01
- TLSH T15813F0D20E34ED84B3D86939BDBC7560E3E0DEBB25B7A7611087E71E1B028462715B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.