General
- Target scandoc12.vbs
- Size 18KB
- Sample260724-phfjlayvgw
- SHA256 0b2fed30ecb51f8da781148bb79ed6dc572d3f8fb36b4dc1aa017254017581e9
- MD5 44caced027d27f8a3efee558be1848e8
- SHA1 385f03779349f9f2052670858d20143eea1fc46f
- SHA512 1af3d7dd3cafd2ecb0a22067744e811c47110555084073c42b6ee90088898a2fa25cacd437887b9c30de5ed1e87b5df1748c2bc1b75142e7704a08b307021334
- SSDEEP 384:KNq4EujqmRkXZPDf4nA1VPGfNOUfP7RVG2AQKXQ947WCXDqADRuzTR7Ax:KlQxSfAEgQG8HCx
- TLSH T1F3829616880DBBF01A6A7557A63BB41D952C0F927C382D093B8FD1BC7B7A5348BC10A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
scandoc12.vbs
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
scandoc12.vbs
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target scandoc12.vbs
- Size 18KB
- SHA256 0b2fed30ecb51f8da781148bb79ed6dc572d3f8fb36b4dc1aa017254017581e9
- MD5 44caced027d27f8a3efee558be1848e8
- SHA1 385f03779349f9f2052670858d20143eea1fc46f
- SHA512 1af3d7dd3cafd2ecb0a22067744e811c47110555084073c42b6ee90088898a2fa25cacd437887b9c30de5ed1e87b5df1748c2bc1b75142e7704a08b307021334
- SSDEEP 384:KNq4EujqmRkXZPDf4nA1VPGfNOUfP7RVG2AQKXQ947WCXDqADRuzTR7Ax:KlQxSfAEgQG8HCx
- TLSH T1F3829616880DBBF01A6A7557A63BB41D952C0F927C382D093B8FD1BC7B7A5348BC10A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.