General
- Target b7e0919a3e4a677539dab51753807c1a58362513ad7229f0c565e55023e76183.zip
- Size 49KB
- Sample260622-vy6cvaew7p
- SHA256 8be2ef6d4a4ddb67fd19c5ee47d68fd8019d87eb2a3906f83bd8a9382779d81e
- MD5 798f04795fa0fed950c912f32c4e46f8
- SHA1 6522151e9f10ebdb241cfbdec8b6e6acdf4a47b1
- SHA512 f50d691795cea083c2a75ac63a64def2e8a7b0a0e48f49102e6bb7d75a4e53429cf16e6a040d288030f4bd138d6c769d7d2d88f939c61961517d3ac452fa04c6
- SSDEEP 768:5Am9nkILLhBO/F9wXJSYixIH1CPLlfY0oGXQluw/r4UL+tJbTwScI0ybKnrp:5lZLhBHrihzlfPiJ/r4xJbTlHZuV
- TLSH T10533F1EEB584951CF4B1E1242636E0377771FF001B0B9D0772C67F8A279D9A8168AAC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
b7e0919a3e4a677539dab51753807c1a58362513ad7229f0c565e55023e76183.vbs
Resource
win11ltsc2024-20260617-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target b7e0919a3e4a677539dab51753807c1a58362513ad7229f0c565e55023e76183.vbs
- Size 94KB
- SHA256 b7e0919a3e4a677539dab51753807c1a58362513ad7229f0c565e55023e76183
- MD5 28dc2797d8053720e0a5c98418450230
- SHA1 0a9529e0544159f5f862dfb98d9c4f77adfb1d0b
- SHA512 7b7b700eff3ff8a66fcc6dbb3b6ad242af7f85ec1a470ac238f75b0377e9c69084c6aa8c69b1158aeeeba6124e29c05c9ee9991dbb194286ddbcb81c66589c31
- SSDEEP 1536:LEA7Gt5PqnFOmm6q2lTG6T9ashRjVYLWOH9Z51cZ0VyeJU5THe:Ln7Gt5iOCqC/XhRjVYLWqn51c0VVU5T+
- TLSH T177934930CEA407694E4B1BA9FC951A61C9BCC669413300F5FEE9170D500A9BCF7BEA6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger