General
- Target Paymentcopy.ace
- Size 2KB
- Sample260722-rlpyjsar9z
- SHA256 78e8967f25305510389c18b9d764703027729f446ce8520bfc24cac99b8f5e48
- MD5 f420dd6e9c1940bc73d8d4d2def22d15
- SHA1 56d929269221a9b5a543b8f2c7d2001fd7c07d76
- SHA512 eeb6e2bf1a5b0a7691563ba137e7f9e96f39a629ef665e692aea8d7d64a2dbe0efed44f6b8b25be72ccc4152ec7b61aa592e34170b6b96140935ffc3e137df0c
- TLSH T145513BEA39292E74125B594432E48C73312C189AD8B0638E42F69F4D4EF7EF941BB314
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Paymentcopy.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Paymentcopy.vbs
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Paymentcopy.vbs
- Size 24KB
- SHA256 6de28336373b0b1d151096bba304c7deb9029d2ae9674c1f8e9322a77686b225
- MD5 d2c8d35c3fa08f8dfe76061c66623e58
- SHA1 148f1bb6973bf1c62058d7bce36bb7fca7968718
- SHA512 079ef5bf2629f035236d4e3876ddd39d68c9e26ca7aa22c2b1efe24c4bce0e7c698acf97357262ca68a5f5794baa40487c1e99c65b03ed66bedbf3c797c417c5
- SSDEEP 192:psobkwSKUgUdO+SDL/LURxUp6bLqnht436z74jvmTeM6HbYLbp0bOGw:WohyYewb
- TLSH T13EB25ADD89CB8BD623F11C8AC5BED430D36A1C8454AB904969B3195F4C8FF7A17813EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.