General
- Target 66REn3va2062418.zip
- Size 9KB
- Sample260727-satb9sgn7t
- SHA256 c330e3b4f90a8d83bfe181849170d38ad3c90a2cdcb51f1ba665a4a62375d4ed
- MD5 51e3edfca716f35a89cb8321a1b159cc
- SHA1 fcb6cd8503ca420ba1eba9ae440b68f378969db4
- SHA512 543dcc683f74d323e8d843391c9d44d507f61625f44e0569d37c46b0349119aab019a12f91496a9532e7de92ea23a3669591f7bb8428f6fc1fbed9e71eb2081d
- SSDEEP 192:8XX5J0seCCRKQe+soW1QeJxW1DnFrPPaRjs3NGB+j9FIGlYbmP2drKh5I1lM8ZIX:apqCCBe+so1eLW1D536s3j+GmbTruq2B
- TLSH T1CD22B02AA401C1CEF287C7DF056294D70C25CE736B4C677BAB11045390D92F2CAAE79B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
RECONFIRM BANK DETAILS.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
RECONFIRM BANK DETAILS.vbs
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target RECONFIRM BANK DETAILS.PDF
- Size 2.5MB
- SHA256 559fa1abb4d65c7c9bc942e118a20c5d470d1f336de41f3367ae9a61abc9a293
- MD5 3f9f67798b462cbe3ca6179e3254eff7
- SHA1 c4f0c26a699e81f53da6b75d04496984a1776802
- SHA512 241d318ddf6c091357635de9f76a2eea552ba6e35cef50faaf35d427703309b4653c6deeff4e78f20f1c4c671c0f4e70f54baab1e3e274c1aaeb3acedec2dce1
- SSDEEP 768:w44444444444444444444444444444444444444444444444444444444444444x:P3zaswpR+wIJwHzr
- TLSH T119C517B21C0D324075A7A95FE13FCADC51E4BC6680C3B6E97B3A3FDD1836121E648666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.