General

  • Target
    Meus dados para reserva_6084492-9116.vbs
  • Size 971KB
  • Sample260810-schcsagh92
  • SHA256 4173e308053264216ee362568bfbdda58b186860fe282bc33f1b7e49418c3a25
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Meus dados para reserva_6084492-9116.vbs
    • Size 971KB
    • SHA256 4173e308053264216ee362568bfbdda58b186860fe282bc33f1b7e49418c3a25
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks