General
- Target 17072026_0335_install.vbs.iso
- Size 366KB
- Sample260717-d5c67sav2n
- SHA256 0dc4b88088edbfdb028c2a269b7675dffd60bd371b255a10b5f4faf23aeecf18
- MD5 c5f6d39e4960c4434b229468a36d0d75
- SHA1 5dec79d0037954837096f634e75914a3db372bf8
- SHA512 0c45e99d2f48c96a36d0e949f474f9b27a0450f435b87e521c695456232b064dfedc257c35b4fdaa73b1135e923e523c065a8becf9cdd804474a84d8df5d8f60
- SSDEEP 48:5iAPJtbNF66Fu0ipqp2eZmAyanGji7rHFOYUTMue2xjG:5/b7jw0ip4JSaGKTFDUp/l
- TLSH T1E384614077842938D395EF3050A0A9E4B1A3F30794B173DE711E504A8F9F2C0D9637B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Invoice.pdf.lnk
Resource
win10v2004-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
Invoice.pdf.lnk
Resource
win11ltsc2024-20260709-en
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
install.vbs
Resource
win10v2004-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
install.vbs
Resource
win11ltsc2024-20260710-en
1 signatures
300 seconds
Malware Config
Targets
-
- Target Invoice.pdf.lnk
- Size 365B
- SHA256 be1800549885aabc185f24e7d7fa2093187ee50a17e570dcf28eef28358b8595
- MD5 1e97883629ec5612e623e651f4fd6f5e
- SHA1 80f0683c76a79aa757c114a086f17803f3558f74
- SHA512 bbd355333428b06d3455a81c9e463acfb83056d9972a347942b6a6072cfd3cef53d0288eb7d6d4598e2c934c48b5860f89f5309e8c1e52df6882306aeac4f9fc
- TLSH T152E08614A6E42758E3B18B3B5078D6951A74BD31ED3787EC46109ACD0928110ED72F36
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target install.vbs
- Size 713B
- SHA256 c447ab079e7d66e038ac18aa3892df9075d3b8f90980ef2cf25d46067c5c2002
- MD5 982fade6c11726409f36d44f0f7cfa22
- SHA1 216ec0f8859d25f8d8f64390bf34063eed24915f
- SHA512 c21efc11ad8375be6ce86f6065aea4ca2683099c7505d4be81730f86d10c667dffee0d83048608bfa29d0fd1bd7755f5f0b6adc24cbd5fff702f430128396ece
- TLSH T1C1010894D111DA1D0BCF4146D4392E18F1C1674BE13070FDB6808049CF1E6F451067DB
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.