RandomQuery (VBScript)
- First seen
- 2022-06-15 00:00:00
- Malware type
- spyware, trojan
- Profile updated
- 2026-07-07 14:41:36
Targeted industries: government-and-public-sector financial-services technology-and-telecommunications
Context
According to SentinelLabs, this is a VisualBasic-based malware that gathers system and file information and exfiltrates the data using InternetExplorer.Application or Microsoft.XMLHTTP objects.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Vbs.Randomquery (report)
- sentinelone.com — Kimsuky Ongoing Campaign Using Tailored Reconnaissance Toolkit (report)