General
- Target pizdak.vbs.vbs
- Size 956B
- Sample260815-xc1lkshc72
- SHA256 911fcc5ac8677d2c018c7bd6cc1f7a935f68cf08adf7178b3e69cef52d0958f7
- MD5 c94fa6e59ebf4e4913ba0ea06eb3e750
- SHA1 b33006ea8edba25a4dfd5bac356ea0098447f7b0
- SHA512 b2f258ca9252c053dec02800c913026a1ec8f066f02485c31916c885241e65e7279dc0bd763b5526d7dbb1b3ea111614e0b4cea261918710c78fae3058ba45bb
- TLSH T100117B5B354B5CEE833A49F0C6023C0CE6B55B7F51D66C06705A184E9FBFAE25019222
- MD5 SHA1 SHA512 TLSH
Static task
static1
Malware Config
Targets
-
- Target pizdak.vbs.vbs
- Size 956B
- SHA256 911fcc5ac8677d2c018c7bd6cc1f7a935f68cf08adf7178b3e69cef52d0958f7
- MD5 c94fa6e59ebf4e4913ba0ea06eb3e750
- SHA1 b33006ea8edba25a4dfd5bac356ea0098447f7b0
- SHA512 b2f258ca9252c053dec02800c913026a1ec8f066f02485c31916c885241e65e7279dc0bd763b5526d7dbb1b3ea111614e0b4cea261918710c78fae3058ba45bb
- TLSH T100117B5B354B5CEE833A49F0C6023C0CE6B55B7F51D66C06705A184E9FBFAE25019222
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.