General
- Target AD8798843.vbs
- Size 523KB
- Sample230801-mwpcjsgd8w
- SHA256 ebaa5d1c5367e8ae95833054050dcc192b9e18ae7402b0809dbcac3476019ff7
- MD5 a1b3da74467a0a284f1e352e8052b9a1
- SHA1 ac75b86e12414e02f7f04e9e5c686ae7d8356c5d
- SHA512 183ac60ce3174ba15680d1c09b67cf32e9283db8b0420c51c24950300e77cc9a8fcf310570af333ef83be19ce2eafe9c54147d30f45f5d72872db060f8fb6f25
- SSDEEP 3072:o/7pOARK31NBilu1hhFl9BRBBCWMcUNvrr/vwCeTqVwvqefghifWDHrsQ8d:Du/ICeTqVwvqefgnrsQ8d
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
AD8798843.vbs
Resource
win7-20230712-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
AD8798843.vbs
Resource
win10v2004-20230703-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target AD8798843.vbs
- Size 523KB
- SHA256 ebaa5d1c5367e8ae95833054050dcc192b9e18ae7402b0809dbcac3476019ff7
- MD5 a1b3da74467a0a284f1e352e8052b9a1
- SHA1 ac75b86e12414e02f7f04e9e5c686ae7d8356c5d
- SHA512 183ac60ce3174ba15680d1c09b67cf32e9283db8b0420c51c24950300e77cc9a8fcf310570af333ef83be19ce2eafe9c54147d30f45f5d72872db060f8fb6f25
- SSDEEP 3072:o/7pOARK31NBilu1hhFl9BRBBCWMcUNvrr/vwCeTqVwvqefghifWDHrsQ8d:Du/ICeTqVwvqefgnrsQ8d
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Drops startup file
-
Suspicious use of SetThreadContext