Overview

overview

8

Static

static

1

FACTURA240...BP.vbs

windows7-x64

8

FACTURA240...BP.vbs

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    FACTURA2402616 - BP.vbs

  • Size

    211KB

  • Sample

    240418-lwp4eahf74

  • MD5

    385f453c2e1447ce087c43d74a6c6bd9

  • SHA1

    a3b3502e77797ac9858c9126738ed2f374d69236

  • SHA256

    34a0a440bb0ba86303c4298d72ae80f9f96ab5250fd37073a0e7328f482472b8

  • SHA512

    915a493ca002e807226abb81f3915ffa655e00a177df7649f031b8d417afc8185a5ae1f149f63e6fd0dc76108e63016840d0d153744cb345999bedf014755349

  • SSDEEP

    6144:xYBgIjQvrMbWSR4WHUJJs9E87Fy4lZrUChpqKmjum4QlNVrDjXR46cCPCRJf6q9m:62dOBRW1

Score
8/10

Malware Config

Targets

    • Target

      FACTURA2402616 - BP.vbs

    • Size

      211KB

    • MD5

      385f453c2e1447ce087c43d74a6c6bd9

    • SHA1

      a3b3502e77797ac9858c9126738ed2f374d69236

    • SHA256

      34a0a440bb0ba86303c4298d72ae80f9f96ab5250fd37073a0e7328f482472b8

    • SHA512

      915a493ca002e807226abb81f3915ffa655e00a177df7649f031b8d417afc8185a5ae1f149f63e6fd0dc76108e63016840d0d153744cb345999bedf014755349

    • SSDEEP

      6144:xYBgIjQvrMbWSR4WHUJJs9E87Fy4lZrUChpqKmjum4QlNVrDjXR46cCPCRJf6q9m:62dOBRW1

    Score
    8/10

    • Blocklisted process makes network request

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks