fa46a667b277a46b92d5ccbab6195db5a15f34052c0c84d48a91413dff0b0538

Analysis

max time kernel
149s
max time network
134s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 09:16

Target
BANK IFORMATION.vbe
Size 49KB
Sample260604-k8gr5aby3x
SHA256 fa46a667b277a46b92d5ccbab6195db5a15f34052c0c84d48a91413dff0b0538
MD5 c9db5284c31b81ba45f46ece4edd9d0e
SHA1 ad44ed70e6d52185dada5275f2bc1b52ed3a955c
SHA512 a613533c0b2914a2d70127554a3ad32722829f87692afdd0b42b4ad10288f2f6eda9ce75332fa7ee0340a333d831347b7622952377627c736071aba9b0fb3280
SSDEEP 384:5x2DGlPsAjZzzZt0wNxXmfcQOKyusb01f9ipun+iAV8oSEsc5ypujr3D2h:OOkI1t0EgcQOKyM1fHXAVbSVccs3y
TLSH
T150338374290C45EF2493EA74B088A7E3FE6C0A5C9FFD664F915487DA1A3E68734C3981
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	2992	WScript.exe
4	2992	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\BANK IFORMATION.vbe"
1⤵
- Badlisted process makes network request
PID:2992