General
- Target dekont.pdf.vbe
- Size 57KB
- Sample260811-ms1lea1eng
- SHA256 f7ff874a16551b7f74615fad365076e1704a575557533eba4cd4bc32435f6ee5
- MD5 211ecb447344cbd31e3d20158be259fb
- SHA1 0a44bdfccab7d78dd50edd2d652b78308f4ed62f
- SHA512 8b1127fc35b7a3b018c64dfc57e99ab71d63762eb8f87464d54c179cebdcfe425bc9512c310fb4e9b986381754302f009d0f6148285903cebb95d543495be73b
- SSDEEP 768:lt7/lfo1IyBdGFeo1PSNF5nt/xVmMv/oRO/dZivJAZjk47g3HZeQ9XXAiY4RBg09:lhlgPTlx5C3y8AOPpY8n
- TLSH T13A43B2F41B28C0D3ACD9BA58C887DFD4E1B47A273CE94D86560097928B1D993BDA1DC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
dekont.pdf.vbe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
dekont.pdf.vbe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target dekont.pdf.vbe
- Size 57KB
- SHA256 f7ff874a16551b7f74615fad365076e1704a575557533eba4cd4bc32435f6ee5
- MD5 211ecb447344cbd31e3d20158be259fb
- SHA1 0a44bdfccab7d78dd50edd2d652b78308f4ed62f
- SHA512 8b1127fc35b7a3b018c64dfc57e99ab71d63762eb8f87464d54c179cebdcfe425bc9512c310fb4e9b986381754302f009d0f6148285903cebb95d543495be73b
- SSDEEP 768:lt7/lfo1IyBdGFeo1PSNF5nt/xVmMv/oRO/dZivJAZjk47g3HZeQ9XXAiY4RBg09:lhlgPTlx5C3y8AOPpY8n
- TLSH T13A43B2F41B28C0D3ACD9BA58C887DFD4E1B47A273CE94D86560097928B1D993BDA1DC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.