General
- Target http://awd
- Sample260810-xccvhs1sat
Score
7/10
Malware Config
Targets
-
- Target http://awd
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Visual Basic
1Windows Command Shell
1Discovery
Browser Information Discovery
1Process Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1