General
- Target 05082026_0602_03082026_Company profiles.rar
- Size 133KB
- Sample260805-grgh9azcnc
- SHA256 6534cc337c11755debb78b91e84aba5600e0ecfc22779f0d3e2ff0d7f37e0c32
Score
8/10
Malware Config
Targets
-
- Target Company profiles.vbs
- Size 342KB
- SHA256 8250a70c59f1cffd6332014b3567d6fb0c98727819b93fca3a4b4a6abc53f8f8
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Registers new Windows logon scripts automatically executed at logon.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Executes a VBScript file via the Windows Script Host.