General
- Target dce3c05ac79a44666174f2f46e1cddc37cad21519340011db27e38669c3147bb
- Size 1.5MB
- Sample260908-ehbwascm2v
- SHA256 dce3c05ac79a44666174f2f46e1cddc37cad21519340011db27e38669c3147bb
Score
7/10
Malware Config
Targets
-
- Target __IMAGE__/__IMAGE__/image.vbs
- Size 1KB
- SHA256 20d9646d679cd82ecfc0542cf326282dafa090e132034444c9208efab095448d
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.
-
- Target 【问题咨询】关于《2026年第二批动车组闸片联合采购项目招标公告（二次公告）》投标准备事宜的咨询.lnk
- Size 1KB
- SHA256 47ad55c3c18d2a355a7f36f1f701d8f0fbc135c565a159242d1bc0a5db66a1b4
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.