General
- Target Zamowienie zakupu_260600044_20260721.vbs
- Size 1.2MB
- Sample260723-p29xjsxtbv
- SHA256 7f3347e8ab745e8a9d4f49ea31fa574225783d3fd0fb89767236cd8e25ec6b5e
Score
10/10
Malware Config
Targets
-
- Target Zamowienie zakupu_260600044_20260721.vbs
- Size 1.2MB
- SHA256 7f3347e8ab745e8a9d4f49ea31fa574225783d3fd0fb89767236cd8e25ec6b5e
Score10/10Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops startup file
Executes a VBScript file via the Windows Script Host.