General
- Target 60ef547ebd2f4252e286db762980481b0da23dcd2c84465509735544c0a9c2b3
- Size 35KB
- Sample260827-wfe9dacl4y
- SHA256 60ef547ebd2f4252e286db762980481b0da23dcd2c84465509735544c0a9c2b3
Score
10/10
Malware Config
Targets
-
- Target 60ef547ebd2f4252e286db762980481b0da23dcd2c84465509735544c0a9c2b3
- Size 35KB
- SHA256 60ef547ebd2f4252e286db762980481b0da23dcd2c84465509735544c0a9c2b3
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.