General
- Target Copia de confirmacion de pago.vbs
- Size 924KB
- Sample260806-kmeewaxcph
- SHA256 c35c2d9570c711b9ebe4f1c4a2cab566b723ff7915179ae029a82653b69a237b
- MD5 a226b9eb8d7822e44d7405db3933d7c9
- SHA1 5210a64f4bd469de123f08f064143f42ef5bd5f7
- SHA512 02e949d771a658ca5dcf98247743728348ddf50543d0db2ae6ada3d2ebb6d69ad5eecf5ffd2522f378021c047324c42811e589e4e5d2ee781b6c2fc492d0dba4
- SSDEEP 768:f/OPu5DYb66yrATivhLAT7nQ9MzOjpPPks9WnFYzrA4jU9akfbI6kFLV1ckO7OyH:36
- TLSH T1CF15BE86C25994278E462D42D3D7DAC87F39383E1226D3E315CEB2EA8CE5850FADD351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Copia de confirmacion de pago.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Copia de confirmacion de pago.vbs
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Copia de confirmacion de pago.vbs
- Size 924KB
- SHA256 c35c2d9570c711b9ebe4f1c4a2cab566b723ff7915179ae029a82653b69a237b
- MD5 a226b9eb8d7822e44d7405db3933d7c9
- SHA1 5210a64f4bd469de123f08f064143f42ef5bd5f7
- SHA512 02e949d771a658ca5dcf98247743728348ddf50543d0db2ae6ada3d2ebb6d69ad5eecf5ffd2522f378021c047324c42811e589e4e5d2ee781b6c2fc492d0dba4
- SSDEEP 768:f/OPu5DYb66yrATivhLAT7nQ9MzOjpPPks9WnFYzrA4jU9akfbI6kFLV1ckO7OyH:36
- TLSH T1CF15BE86C25994278E462D42D3D7DAC87F39383E1226D3E315CEB2EA8CE5850FADD351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.