General
-
Target
code.vbs
-
Size
271B
-
Sample
240705-nhtwjsxdlr
-
MD5
e0f806947d5250e613d90a08aabf53dd
-
SHA1
8aed8a7c0e7cee223a2c1aa926154ade74c23316
-
SHA256
15a06ed5f3fc9efb44cea8c22819b3350ca0a3bf6d81476c5eab5276fa6f1fa9
-
SHA512
71af5e2c1afe5085a69a546ff7893df6c284cc85559220d61da7cb2ea7380138081e327ffe3dfc0f56ff9366e5ec0c96ec5b06e8ef3ff9c92b6135159457f44a
Static task
static1
Behavioral task
behavioral1
Sample
code.vbs
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
code.vbs
-
Size
271B
-
MD5
e0f806947d5250e613d90a08aabf53dd
-
SHA1
8aed8a7c0e7cee223a2c1aa926154ade74c23316
-
SHA256
15a06ed5f3fc9efb44cea8c22819b3350ca0a3bf6d81476c5eab5276fa6f1fa9
-
SHA512
71af5e2c1afe5085a69a546ff7893df6c284cc85559220d61da7cb2ea7380138081e327ffe3dfc0f56ff9366e5ec0c96ec5b06e8ef3ff9c92b6135159457f44a
-
Possible privilege escalation attempt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Modifies file permissions
-