General
- Target 62225175e12a891b6ed045468dd8a1d3cbaa4e369858364192a7438d92eff458
- Size 44KB
- Sample260811-e8bcfsgj3t
- SHA256 62225175e12a891b6ed045468dd8a1d3cbaa4e369858364192a7438d92eff458
Score
8/10
Malware Config
Targets
-
- Target purchase order#13345.vbs
- Size 22KB
- SHA256 4668edaaaae9bb13aa8b8678c285ce62d67c49b7eb30f5832b9c1c04aefcbd9c
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Executes a VBScript file via the Windows Script Host.
-
- Target purchase order#13345.vbs
- Size 22KB
- SHA256 4668edaaaae9bb13aa8b8678c285ce62d67c49b7eb30f5832b9c1c04aefcbd9c
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Executes a VBScript file via the Windows Script Host.