General
- Target 18072026_0929_Quotation2026.vbs.gz
- Size 6KB
- Sample260718-lfs55aav3v
- SHA256 616d2a640e9ed3a6c1829e15cbbf95815c05aeb01c71df010d2fd4241ec8f638
- MD5 701ca6f202d18ef221f85c6640cd084d
- SHA1 4d1b38fac35aa1095868828fee66fbf893f1f178
- SHA512 002e00cfb0b04655eb1a4b88bdd9a59c59b4211cd345f984aea34526a78224107b421e12d3515604e6c89378da0cbb81d7283503e0eeae57e4778f6df5bb4da0
- SSDEEP 48:XLc/MGzKofT9oQsZVo8DuGcjO9b/QGdwjCSJxUAfgBtxJVHnpPEGHl:tG+0TgDBcjOt/QVCSIA0TLHRPl
- TLSH T12BD12994B816D0AD51F453BC3B5809B9D386C113E15327A4A3B0162A0E19998EEAECBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Quotation2026.vbs
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
Quotation2026.vbs
Resource
win11ltsc2024-20260710-en
6 signatures
300 seconds
Malware Config
Targets
-
- Target Quotation2026.vbs
- Size 1.0MB
- SHA256 b876809394c98676d804245142a3eec6caedeed354c1028da33d57b2c159195d
- MD5 9c89ba72b10e747126ad007e1d793f0d
- SHA1 4b2cfa209836145ea998250a50e9fe457c64756d
- SHA512 746fc4422554daf7bb8f2d9861d6f02256cc8e94c01c565c42f5a7cc362b75596268d79f617512a7752c3acb689302a6cd0b48a29267d0a6ea5cfca5cde35531
- SSDEEP 96:GAjfUCZZEWBqkgT92TiSQVnFB2z+jEFaV/DzLqFRzyRjdnO:XzZxUZ2WSQJFI+jXVrzLqFRzCjdnO
- TLSH T1E93585EA1A0D12EC570EA5C391275E4DC16DBA5EF03621B317AFA93C361F61489CF42B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.