General
- Target att1-2406261629573.vbs
- Size 22KB
- Sample260521-r58vrsav4z
- SHA256 d2c6cbde8e53d5ff001da2f40dfa7e86278abbc6dcd1636d3a5d4276eeb6d36b
Score
8/10
Malware Config
Targets
-
- Target att1-2406261629573.vbs
- Size 22KB
- SHA256 d2c6cbde8e53d5ff001da2f40dfa7e86278abbc6dcd1636d3a5d4276eeb6d36b
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Network Service Discovery
Attempt to gather information on host's network.