General
- Target MDE_File_Sample_48b46f04e0fd38a0c0f76d05fac482b7755a4b9d.zip
- Size 16KB
- Sample260912-pbnavsbd33
- SHA256 ce9ed1b730f7e6ef62458863af663a7dfaf3ea661e7e688fae55a5ada8f5a699
- MD5 c184b73913adcfc6a7e2d686991bd93c
- SHA1 01d3444152cf0fd1dbb5b91f7c61204f0e06d71b
- SHA512 002a71d74bc688940da9af2956924e76f91e20d2c8672abf996d31e3f12a906207402a982f5fae66482bfc2f4b919a391599f3f0ed194fe8ec8319fedd5e5985
- SSDEEP 384:p9YWZ2Xi6YLZImSrFk+eNcvhawOefFzaqfWX7a:SSik+ey52YGu
- TLSH T10C72D036DB9591F0AB06AE39EC233B41C6456E70B274CC98B33F19024F96D792C8657D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
prnjobs.vbs
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
prnjobs.vbs
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target prnjobs.vbs
- Size 79KB
- SHA256 1299310bafcab554ed784d28cb68f71c152b24f50ac25155648059a93f533f6a
- MD5 f9d26c88b0ba0b701e54e4addddddb84
- SHA1 48b46f04e0fd38a0c0f76d05fac482b7755a4b9d
- SHA512 c6861ee1e9db18446ca998e1665dad753b359c965c16b5267a0627c06351c52cef0262e5acf732da5f345d45eaf58bf46239fbe1e5b87049568d42cfe679a0a0
- SSDEEP 1536:+o125FjaXGxbMN75ro6BHB1Z6N3VkOQkLnwuHOq7:L6QMbE+
- TLSH T16F8367422AFA5008B5B2BB844AB955B54F2BBDDD6C7DD41E01CC960D4BE3D80CD60BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.