General
- Target Doc_Ref0000002_pdf.vbs
- Size 19KB
- Sample260622-snee9sdx8p
- SHA256 76f4040829c84eaf58b7cfc292b7d378ceab505e9bd78eb8ef8482e516885a23
- MD5 a84fcc8d89cdd8e373e930af4febb8d9
- SHA1 c46ed005287133d52616f6c563d57145c6051963
- SHA512 39e73d5d8b079cbd63aacb46eda74792d1a0a47a737293f9f44d74841a6ab9c4ab1a4544a34a14c4435dffe2f0e38623f9c49b063fddf6d4a4899c055d4fce28
- SSDEEP 384:Ky7s9mpuBQW9Bi4nsBh1ZTchDv13lZcY59T7AK:KO7W9B0jTTczoK
- TLSH T11592F8278908AEF4086E32D2298B1C1B86111341B670790DF98ED89D3F7F751DBE29EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Doc_Ref0000002_pdf.vbs
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Doc_Ref0000002_pdf.vbs
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Doc_Ref0000002_pdf.vbs
- Size 19KB
- SHA256 76f4040829c84eaf58b7cfc292b7d378ceab505e9bd78eb8ef8482e516885a23
- MD5 a84fcc8d89cdd8e373e930af4febb8d9
- SHA1 c46ed005287133d52616f6c563d57145c6051963
- SHA512 39e73d5d8b079cbd63aacb46eda74792d1a0a47a737293f9f44d74841a6ab9c4ab1a4544a34a14c4435dffe2f0e38623f9c49b063fddf6d4a4899c055d4fce28
- SSDEEP 384:Ky7s9mpuBQW9Bi4nsBh1ZTchDv13lZcY59T7AK:KO7W9B0jTTczoK
- TLSH T11592F8278908AEF4086E32D2298B1C1B86111341B670790DF98ED89D3F7F751DBE29EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.