General
- Target 04062026_0424_cwiphsnb-ptpllk_61831-38446.vbs.zip
- Size 715B
- Sample260604-e1epxahy9s
- SHA256 25dd9804cc07c394b36bbc1527a7d4caa9967749d41b3d764eb3d23faf6f843e
- MD5 c4e95b6fcc08f1ba0c78d13fd94270ef
- SHA1 370d79d5414bb180e2e9c145f9f777e40ee31fec
- SHA512 35d71e37be97c84018987dee3f311a862a0f652f7f438adc1beb990d5c16ea6dcd7192922fc945cc3142148d1b23b1762ae5cc289de69ba5ea312f39bc58efda
- TLSH T1920144AC6E21370EC84730F55D91282660A01CEC260634FEBB65F6F90C08AD1A4FD01B
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
cwiphsnb-ptpllk_61831-38446.vbs
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
cwiphsnb-ptpllk_61831-38446.vbs
Resource
win11-20260513-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target cwiphsnb-ptpllk_61831-38446.vbs
- Size 1KB
- SHA256 3679a5dfcf9f77daa767e4fee7e4aa0dc7e9755f9b86527d84ccc33b174edde4
- MD5 0a6b49ba2916425b17b23e3ee419074e
- SHA1 9d1f2111a7f8a7d27129bbe6c5c5fb4ec1e7ce99
- SHA512 3e7fe760cca5907c4f96922222f0f11c0c21b6e4839a532df04c6b2f9d9eb6034694a4a08510670179913c6c495dda26ca2ec37fdbe6edc384b488cf21670796
- TLSH T1BC214CCF9A1D9D11B66716839E5FA75A40F84EC058BCDE7C01B6CC8DD0108EBA18757A
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.