General
- Target NewProject_Collaboration_Agreement_EN_US.zip
- Size 2KB
- Sample260723-pphmjacm4y
- SHA256 5271ba5e16271dad8fcab46a7812c813c0361eacc8c640793e711db5b860700f
- MD5 6e9406956b0e9fcf35d27f556c51a7e6
- SHA1 49ddb698b5300c6b074c692545abf726f821b51c
- SHA512 ecabea0a40d66c7ae2998b0a59feb0c55a2e6b4360e943f90f5741809fae22107c5ee8bdaeec824e8c348f3d6bab7fbafbc8b9947b2dbf4949298f6cef758b3f
- TLSH T11A511C43EE64D6296CF2A0386949ED2B22D7DCFE690E355514F0D84D91F8B986238812
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
NewProject_Collaboration_Agreement_EN_US.vbs
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
NewProject_Collaboration_Agreement_EN_US.vbs
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target NewProject_Collaboration_Agreement_EN_US.vbs
- Size 5KB
- SHA256 d1b1bb49facc4363aaf8e29b026b7e90cc03bf4fa2b5c7968381b503b85a943c
- MD5 870408f12a7e2e36bce056b39f767557
- SHA1 b9db63e562b83bfdea1797f1ddf197a5aae66757
- SHA512 79da6acfe2659eed995232078cce0c7377bb7061ddc326558946c24998feaf7908105a76fe38d8e5822dc1267492e3a3fe406102fd9b8c638ed9e1025e41a55c
- SSDEEP 96:CsPqJqnBdroyQ6gE9XFNv8zORK+ySSPXOK/GGS3/CLsCLTyOTBe6Q77XrFl8tu8j:Cs6s3r3kaK+0P+K/bSQyOT86QD8tuwvB
- TLSH T19BC1968BBE03DB3089038856DB4A5D0EBE60312F55191564FA2CC9E41F90F72B7682DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
Executes a VBScript file via the Windows Script Host.