General
- Target RFQ-2026-00806_Supply.vbs
- Size 288KB
- Sample260813-nr2mragl2v
- SHA256 20ba3a289ae773cdb7280eec1baad4bdd7f59b9e5c095651680c902d12ec757d
- MD5 4806e9dce354266a2446a68f667b9a23
- SHA1 7bcf82e7d53e0dd8a78c1f5b206b6dedf153ba12
- SHA512 42a5048f8bedfb91f49f45fe6a8d50de800a459f0f5f0b3c9341957be36ea4475976f509071a9b99536d96139556371af179e4c5f66c1d833bf8abf7b24233c7
- SSDEEP 6144:RhzAESJuTSBSmedCVsM3esLFeYNiak4XiNKGYVnPr:Rh1nIPe0YsJ9byenPr
- TLSH T1E55410516DC5BC84B0BA9112DBCBC796F068FE91F7671906A5E382D403E0744BE83A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
RFQ-2026-00806_Supply.vbs
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
RFQ-2026-00806_Supply.vbs
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target RFQ-2026-00806_Supply.vbs
- Size 288KB
- SHA256 20ba3a289ae773cdb7280eec1baad4bdd7f59b9e5c095651680c902d12ec757d
- MD5 4806e9dce354266a2446a68f667b9a23
- SHA1 7bcf82e7d53e0dd8a78c1f5b206b6dedf153ba12
- SHA512 42a5048f8bedfb91f49f45fe6a8d50de800a459f0f5f0b3c9341957be36ea4475976f509071a9b99536d96139556371af179e4c5f66c1d833bf8abf7b24233c7
- SSDEEP 6144:RhzAESJuTSBSmedCVsM3esLFeYNiak4XiNKGYVnPr:Rh1nIPe0YsJ9byenPr
- TLSH T1E55410516DC5BC84B0BA9112DBCBC796F068FE91F7671906A5E382D403E0744BE83A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.