General
- Target niceworking.vbe
- Size 63KB
- Sample260819-xx3xfa1eqa
- SHA256 6f6cb5d3dbb2c6df2cedb919626fc5f273aba90eda86c9efd17d9af3855de79b
- MD5 118e6db33ae48e0584143bfa2625c789
- SHA1 379a4de374296ac9f23ed6212eda7a4aeafb2637
- SHA512 943fef383d4e6c29dc5964bd9ce76504c521ebde82c1178fde529e88029c3f454f9bd70f73daa80606e91114b39348786727ebce30bfa85af212f5bc0d3b36cf
- SSDEEP 768:B7nElY1oE7gtfscWIXF2ObQKifq7+aD3QYAT4Lib22iSv5B5l3jkGt2c+DQihCX9:Ks/cdPpNstiJ2KmT
- TLSH T1E053D2741B2848D3094BFC48E08217D6CFF8D21726AF2DB69340A696079D5DB9CB1DEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
niceworking.vbe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
niceworking.vbe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target niceworking.vbe
- Size 63KB
- SHA256 6f6cb5d3dbb2c6df2cedb919626fc5f273aba90eda86c9efd17d9af3855de79b
- MD5 118e6db33ae48e0584143bfa2625c789
- SHA1 379a4de374296ac9f23ed6212eda7a4aeafb2637
- SHA512 943fef383d4e6c29dc5964bd9ce76504c521ebde82c1178fde529e88029c3f454f9bd70f73daa80606e91114b39348786727ebce30bfa85af212f5bc0d3b36cf
- SSDEEP 768:B7nElY1oE7gtfscWIXF2ObQKifq7+aD3QYAT4Lib22iSv5B5l3jkGt2c+DQihCX9:Ks/cdPpNstiJ2KmT
- TLSH T1E053D2741B2848D3094BFC48E08217D6CFF8D21726AF2DB69340A696079D5DB9CB1DEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.