General
- Target Family itinerary file.vbs
- Size 24KB
- Sample260907-v949xssbre
- SHA256 bb5f221bcaacb6774173084dd24d459f373b28474414b87f97490e24e50451ea
- MD5 bbb4d9af6cc994c500e60b584f665a73
- SHA1 7b09e54e61c08f18678d6b6a478c23c568543c2b
- SHA512 43c102ebec67171bd4bf34fa62d6dc2d17f8f52c1126b00a383613d0be90f2f0f29a71e506ab302aa78609bb35a3c373c51fc85dc16316deb19b11b9999889f8
- SSDEEP 384:K2bOXjogjZ4eenG1qpIv2xiF+nSzKlRhNHpawMtrvmFONFhEcm5Q0rGrGNPb7Tm1:K+CHWegGaKHgcmgX6BZUP
- TLSH T117B254068C0D8BF01D2937D7B51FA419AA1053A7F83C784E388FD15E7B776608BC60AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Family itinerary file.vbs
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Family itinerary file.vbs
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Family itinerary file.vbs
- Size 24KB
- SHA256 bb5f221bcaacb6774173084dd24d459f373b28474414b87f97490e24e50451ea
- MD5 bbb4d9af6cc994c500e60b584f665a73
- SHA1 7b09e54e61c08f18678d6b6a478c23c568543c2b
- SHA512 43c102ebec67171bd4bf34fa62d6dc2d17f8f52c1126b00a383613d0be90f2f0f29a71e506ab302aa78609bb35a3c373c51fc85dc16316deb19b11b9999889f8
- SSDEEP 384:K2bOXjogjZ4eenG1qpIv2xiF+nSzKlRhNHpawMtrvmFONFhEcm5Q0rGrGNPb7Tm1:K+CHWegGaKHgcmgX6BZUP
- TLSH T117B254068C0D8BF01D2937D7B51FA419AA1053A7F83C784E388FD15E7B776608BC60AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.