General
- Target Textdokument (neu).txt
- Size 64B
- Sample260730-nqerlagf57
- SHA256 143f1f8350433fa783ae57daae174e9a68b7f0b8f6d220672dc3d83896778642
- MD5 94b5679fb9b91475a93eb5b56bdfd7da
- SHA1 bed4b9e0e7138869f09af11cedea099814725b08
- SHA512 295bdf8c37654410d3964fc1ca97ec48869dc5da755572e910de3c0dc60fc09086f5c9c8b5ca4b25ed2d802a38457e33541beaca00d0df19b873afba4bd0b095
- TLSH T133A002673298F95C2FD494EC544C6204A12F4014BDB0CBD5C119451E703163D725A40A
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Textdokument (neu).txt
Resource
win10v2004-20260513-de
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Textdokument (neu).txt
Resource
win11ltsc2024-20260710-de
0 signatures
150 seconds
Malware Config
Targets
-
- Target Textdokument (neu).txt
- Size 64B
- SHA256 143f1f8350433fa783ae57daae174e9a68b7f0b8f6d220672dc3d83896778642
- MD5 94b5679fb9b91475a93eb5b56bdfd7da
- SHA1 bed4b9e0e7138869f09af11cedea099814725b08
- SHA512 295bdf8c37654410d3964fc1ca97ec48869dc5da755572e910de3c0dc60fc09086f5c9c8b5ca4b25ed2d802a38457e33541beaca00d0df19b873afba4bd0b095
- TLSH T133A002673298F95C2FD494EC544C6204A12F4014BDB0CBD5C119451E703163D725A40A
- MD5 SHA1 SHA512 TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.