General
- Target 891c02054b63640d1d435b8b0078cb274b115ddf59c3ffb5ba22b29b1c6d383a.zip
- Size 10KB
- Sample240613-bvpfdaygrd
- SHA256 891c02054b63640d1d435b8b0078cb274b115ddf59c3ffb5ba22b29b1c6d383a
- MD5 bcd64ba572a29c284de5f52bfcf8fe00
- SHA1 8303638e6bd38e4cf9ce9e0d73cd2b89a61a4ebc
- SHA512 d55056a564a5a2bf978f3f738e4c410e64355d93f2e0ce7ae100a460539b246a217072170c0c4b6b767633113bdc8a1e6dcd141f316be724eac58ca66d6076be
- SSDEEP 192:KVMNJX2DL44jZazAZyKnoE+vJLdR2jQxQAW4DV13tCBGM6tNu75Lj:gMn2DM4qAsIMRfIAW4R526tN4Fj
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
exp_exporter-175.vbs
Resource
win7-20240611-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
exp_exporter-175.vbs
Resource
win10v2004-20240611-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target exp_exporter-175.vbs
- Size 21KB
- SHA256 99bd8aa333b6ffd5cb83c7e4b5b4e0925cb402816ba3107eba1711ffcc21b9db
- MD5 a4947ae8b03dd8a775430ba69247e449
- SHA1 7a5865aa39c338cf454fc30355a1fc03f8dc544e
- SHA512 2cde8f233d47d5c16dc826867f069e37fc78b5d7b5a7362a3cad116b0dad9c9b40055e6341b2ec010bad941b63361585e2750fc753ab8370f7c1a81714eeabe0
- SSDEEP 384:rLdA2Vadgii+9MOu8qATxx55kL7hKQdzhTx2U:r+2cd5i+9MOlTxx55kFhT8U
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Legitimate hosting services abused for malware hosting/C2