General
- Target RFQ#1110264.zip
- Size 1018KB
- Sample260908-cb6e8azdlg
- SHA256 1fe647fb148028c4b7ffe8275e305f37a5449fc75d6e3c1851c043e54406a1a1
- MD5 3c6b60ce50efc4b6f1573c4fef558211
- SHA1 69836eddf8f78cd40ebc48ff20881ecc01175602
- SHA512 c93451ecf84c171c4ef4bf743abf13aa361b79fe723fe0961b979658580560219ad8bc1cd0b31ba0ad82b9a1febbba31e23ffaf197bb9cacc031172085a5836e
- SSDEEP 24576:bKnW8PRmt2QqvfT3zePi7JIiSx7RZsJoBmIaV4BLwTwABhDApnIr2kFVm:bcvPRa2bvfT3zePoza7/sJkEmB0TrBhI
- TLSH T15B2533E0725F9FD60ECE1A2F98E350299B14957C0B72B4DBCE662CDE7A32504392E5C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
RFQ#1110264.vbs
Resource
win10v2004-20260513-en
9 signatures
600 seconds
Malware Config
Targets
-
- Target RFQ#1110264.vbs
- Size 18.4MB
- SHA256 6542c5d1fa6435e6fd1ce77297920da6c3f8d726f9f425e16ae4b2694f50500e
- MD5 c3346fb36de3d094519ba433b54601ef
- SHA1 6c2ec7aa9c364125be1c81a54d6c9aa27e2569c8
- SHA512 419ed0f566b6cbd07de794d6a9653b1d83f8fee8bca27c751a785b19cf6dd4cfdcf4083a30920c3b8bdd459e45103cabe76c4433cbfc64f6b08f8bba13743286
- SSDEEP 49152:fJnn71zT3mcAaeUl+WkAKBIyqGuZ4Xk38jNIBcDCp/FBPaaGpZhJrUdtsN7o3XwK:d
- TLSH T1F617BC3C66943466153BD1C6BA73C22B4DB490BFB20B3357698C430C3959C9EAB9A47F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.