General
- Target SHIP PARTICULARS.vbs
- Size 2.6MB
- Sample260417-rssm1shv5l
- SHA256 52db82045a84885d6baf046b451a1c8473e3eb0e4b3e2bda84e2c2af2ac27645
- MD5 2d28ca56fe2f53445fff456758a56f54
- SHA1 71917e1f6832378688410c03e8b8064a59b8ba11
- SHA512 e2290e88b6d631905f26ca911ebcddd5fede03d5d100760566f63c2ec999152782ed9a578ff069c5d1225394a7547cf4a131a3ded0475b0bd83da47615f56417
- SSDEEP 192:8wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwg:ro/W
- TLSH T183D5DB482B8E61966F821FD6EDEAF561D13D683124FD45218CD373BC40AABFC0E571A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SHIP PARTICULARS.vbs
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
SHIP PARTICULARS.vbs
Resource
win11-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target SHIP PARTICULARS.vbs
- Size 2.6MB
- SHA256 52db82045a84885d6baf046b451a1c8473e3eb0e4b3e2bda84e2c2af2ac27645
- MD5 2d28ca56fe2f53445fff456758a56f54
- SHA1 71917e1f6832378688410c03e8b8064a59b8ba11
- SHA512 e2290e88b6d631905f26ca911ebcddd5fede03d5d100760566f63c2ec999152782ed9a578ff069c5d1225394a7547cf4a131a3ded0475b0bd83da47615f56417
- SSDEEP 192:8wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwg:ro/W
- TLSH T183D5DB482B8E61966F821FD6EDEAF561D13D683124FD45218CD373BC40AABFC0E571A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
StormKitty payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of SetThreadContext