General
- Target image.vbs
- Size 273B
- Sample260906-w431cazfmc
- SHA256 44fa17903c75a2dfc51423d7c5eb6ce6db5e0e80be3bd3797fb45032eb8c7fd7
- MD5 ce72608dbd9ff45aa8b7b4a3b045f17d
- SHA1 522f4ae8a70702507e009315b72192b76b6c854d
- SHA512 9f4d270be25f3eed0a1fe3ea2631631dc16a3bc3332857abc7d972e610fc47c20f75253d751dfbf5ac70e8c780afd71951f1d4c763ab2bd87e3a9425235b36a6
- TLSH T1DDD02B11442CC4BD42126601705FD5C4FDEDB5129F83D120F407F94C510D06F4E1E406
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
image.vbs
Resource
win10ltsc2021-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
image.vbs
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target image.vbs
- Size 273B
- SHA256 44fa17903c75a2dfc51423d7c5eb6ce6db5e0e80be3bd3797fb45032eb8c7fd7
- MD5 ce72608dbd9ff45aa8b7b4a3b045f17d
- SHA1 522f4ae8a70702507e009315b72192b76b6c854d
- SHA512 9f4d270be25f3eed0a1fe3ea2631631dc16a3bc3332857abc7d972e610fc47c20f75253d751dfbf5ac70e8c780afd71951f1d4c763ab2bd87e3a9425235b36a6
- TLSH T1DDD02B11442CC4BD42126601705FD5C4FDEDB5129F83D120F407F94C510D06F4E1E406
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Executes a VBScript file via the Windows Script Host.