General

  • Target
    Suivi_de_Votre_Colis_.zip
  • Size 2KB
  • Sample261102-pk4dfaws3k
  • SHA256 859886a6bcaf61007a2688f7e9632b69d1dcd5e853ebd49be7499590745f4f89
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      Suivi-de-Votre-Colis-.vbs
    • Size 10KB
    • SHA256 c246054359eb47b2dbb6768941ba69274d593fd1a6a9a7378ec4cbf2f656b2f8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    • Adds Run key to start application

    • Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks