General
- Target Acil_Siparis_Listesi.pdf.vbs
- Size 864KB
- Sample260707-pcy4raev3n
- SHA256 26bf472426b4b4481c121b85548adbff9f329d1bd7d2f3911b6ddfec97582424
- MD5 41e1b4711f41c73da1d9280a0c384069
- SHA1 4ec62fbcbaab4bb5c12e6aaaca41903f596a4704
- SHA512 8f46b4ea489b16a6eaf1bc6e24f4523d8de06cbdd0262ead392a851be4774a4b2cce7e3b8f51fa8c3596d7666354cbd54b538c8608908a2dec9db2c90b28c5bf
- SSDEEP 384:SfBjbF7GpxkmpyGkJkr/21k3hYYZk1r/2pkXpGbGw1k3ijbF7GpxkL/kspwGhYYH:x
- TLSH T14B15254D9E93BC941C91F28EC5E20C69CBCE425B2DD53247A93166F7D648A4C08D9CFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Acil_Siparis_Listesi.pdf.vbs
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Acil_Siparis_Listesi.pdf.vbs
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Acil_Siparis_Listesi.pdf.vbs
- Size 864KB
- SHA256 26bf472426b4b4481c121b85548adbff9f329d1bd7d2f3911b6ddfec97582424
- MD5 41e1b4711f41c73da1d9280a0c384069
- SHA1 4ec62fbcbaab4bb5c12e6aaaca41903f596a4704
- SHA512 8f46b4ea489b16a6eaf1bc6e24f4523d8de06cbdd0262ead392a851be4774a4b2cce7e3b8f51fa8c3596d7666354cbd54b538c8608908a2dec9db2c90b28c5bf
- SSDEEP 384:SfBjbF7GpxkmpyGkJkr/21k3hYYZk1r/2pkXpGbGw1k3ijbF7GpxkL/kspwGhYYH:x
- TLSH T14B15254D9E93BC941C91F28EC5E20C69CBCE425B2DD53247A93166F7D648A4C08D9CFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.