General
- Target z1INV_PAYMENT.vbs
- Size 37KB
- Sample260724-hs8jsseh89
- SHA256 577728d97e6e56ff3aec97e6c83f96c48eefb5078dbce368c14df53255c87f30
- MD5 87661f4dba23fbca6c827329ebf7af36
- SHA1 bdee381e1bb0f8f23ea060baf0559350b00f6d2d
- SHA512 acf9a32ec1c905fa148fda820ea008d5e0db76aacc55dd0ac7ac0b9de3b1236eb38a72ec1f8c73ff590a6d31c51d5466b60bcac827bbf21cfc90e5be4eb25925
- SSDEEP 768:8LW8UC05+GrZ+t5rerkwpyrI2nnurykwp+ro+5U5fyrId8UC05+GrEwrz+f52nnQ:9JU//xa
- TLSH T18A039786B89EF449138C4D8D2F8DAD242F6D977969748DD624A9B31506C90ACF3F302F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
z1INV_PAYMENT.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
z1INV_PAYMENT.vbs
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target z1INV_PAYMENT.vbs
- Size 37KB
- SHA256 577728d97e6e56ff3aec97e6c83f96c48eefb5078dbce368c14df53255c87f30
- MD5 87661f4dba23fbca6c827329ebf7af36
- SHA1 bdee381e1bb0f8f23ea060baf0559350b00f6d2d
- SHA512 acf9a32ec1c905fa148fda820ea008d5e0db76aacc55dd0ac7ac0b9de3b1236eb38a72ec1f8c73ff590a6d31c51d5466b60bcac827bbf21cfc90e5be4eb25925
- SSDEEP 768:8LW8UC05+GrZ+t5rerkwpyrI2nnurykwp+ro+5U5fyrId8UC05+GrEwrz+f52nnQ:9JU//xa
- TLSH T18A039786B89EF449138C4D8D2F8DAD242F6D977969748DD624A9B31506C90ACF3F302F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.