General
- Target run.vbs
- Size 2KB
- Sample260919-kk16vsdc57
- SHA256 c45635b582af74b13422a0af8b3032f0dda6df9888b55549f0f42beef48eff65
- MD5 3afd66816397dd73cc2492d14bbb10f7
- SHA1 d7772eea69c2d65820f53cf0c6e1c17d9e1d9cba
- SHA512 d3724d37e341e4b3d0816dff5cf70001bedd32b56fdce6f629bd9abaab716770c4d4ec154fa90949d8bb954c5c8822ab480f2321057c72a3d4d390ebb347a848
- TLSH T1E6418506BC1B8C644D32C77A2677A00FEAD4E503B1338C68B69C4D035FB765A8D55696
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
run.vbs
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
run.vbs
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target run.vbs
- Size 2KB
- SHA256 c45635b582af74b13422a0af8b3032f0dda6df9888b55549f0f42beef48eff65
- MD5 3afd66816397dd73cc2492d14bbb10f7
- SHA1 d7772eea69c2d65820f53cf0c6e1c17d9e1d9cba
- SHA512 d3724d37e341e4b3d0816dff5cf70001bedd32b56fdce6f629bd9abaab716770c4d4ec154fa90949d8bb954c5c8822ab480f2321057c72a3d4d390ebb347a848
- TLSH T1E6418506BC1B8C644D32C77A2677A00FEAD4E503B1338C68B69C4D035FB765A8D55696
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.