General
- Target install.vbs
- Size 2KB
- Sample260623-2weknsgy4m
- SHA256 53ef61db39641a62ad0ce9e3ef5fe89341b706c0367c4ea242c2b76edb41ab4d
- MD5 8124ae6e5f32edb0fb17279aba62a123
- SHA1 a312efa6565e3053190714aeda758eb403b18fa8
- SHA512 23f2f6502582cae1b17cdbb9dcb82106cdcae66d514da5df5befee0ab296c72bfe4992c1aef277817afb55be91b497b53a326af5543ba4817992ad6d84a63e88
- TLSH T17B413543B42709570AD256C8C3494C19DE9216B7682A41AB37DC180C1F32FFFD1B59B6
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
install.vbs
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target install.vbs
- Size 2KB
- SHA256 53ef61db39641a62ad0ce9e3ef5fe89341b706c0367c4ea242c2b76edb41ab4d
- MD5 8124ae6e5f32edb0fb17279aba62a123
- SHA1 a312efa6565e3053190714aeda758eb403b18fa8
- SHA512 23f2f6502582cae1b17cdbb9dcb82106cdcae66d514da5df5befee0ab296c72bfe4992c1aef277817afb55be91b497b53a326af5543ba4817992ad6d84a63e88
- TLSH T17B413543B42709570AD256C8C3494C19DE9216B7682A41AB37DC180C1F32FFFD1B59B6
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.