General
- Target 30072026_0438_2826 PO for TYH.pdf.vbs.gz
- Size 13KB
- Sample260730-e9papscp9v
- SHA256 82947b4bfa3c959c6ff96d189a04cb1e98047dc99ba78e9e665838be85b93ebb
Score
10/10
Malware Config
Targets
-
- Target 2826 PO for TYH.pdf.vbs
- Size 2.7MB
- SHA256 979f540d057a80e50bd660e44a70018c959eb1a242678c67dc2ccf533a918c4f
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.