General
- Target mal.vbs
- Size 2.6MB
- Sample260803-khpp2sen5y
- SHA256 4ded0d1424c44c06f741abcf8e5bf297189db1476af99a00f007da384ed97e8d
- MD5 7a0a6830ecd272018f85a0378aa78a3d
- SHA1 f33e56dfa201c216e8f62cb38f915d5259789e71
- SHA512 cff3aacd6bae2f2b99f740cb4ad348f131ade2ba2deb5a5292d3898249a612d47c43a9b4ec4f723c89370c772a7d00765224ab21c3deb5e6675f9f50e26019e9
- SSDEEP 384:/pnl6bz6/pOQ8JtguPCz+4L6r75pPJyopZTg8a4b1siu+glFrgo9yep2gzaZpiux:h2
- TLSH T1F7C50136E48476BCBD652DAE3E0C730D2B0D7495F0954823868A2E6F93BC5DA44D27CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
mal.vbs
Resource
win10v2004-20260513-en
6 signatures
60 seconds
Behavioral task
behavioral2
Sample
mal.vbs
Resource
win11ltsc2024-20260709-en
6 signatures
60 seconds
Malware Config
Targets
-
- Target mal.vbs
- Size 2.6MB
- SHA256 4ded0d1424c44c06f741abcf8e5bf297189db1476af99a00f007da384ed97e8d
- MD5 7a0a6830ecd272018f85a0378aa78a3d
- SHA1 f33e56dfa201c216e8f62cb38f915d5259789e71
- SHA512 cff3aacd6bae2f2b99f740cb4ad348f131ade2ba2deb5a5292d3898249a612d47c43a9b4ec4f723c89370c772a7d00765224ab21c3deb5e6675f9f50e26019e9
- SSDEEP 384:/pnl6bz6/pOQ8JtguPCz+4L6r75pPJyopZTg8a4b1siu+glFrgo9yep2gzaZpiux:h2
- TLSH T1F7C50136E48476BCBD652DAE3E0C730D2B0D7495F0954823868A2E6F93BC5DA44D27CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.