General
- Target 8BA4DD9_l.bolat.zip
- Size 8KB
- Sample260912-pl98dabg66
- SHA256 621abfea3712f11106672b38924c1729566f66c4bfbe66e54b1d081ce6e57001
- MD5 3fc57e8efb0f2f569de2f6f1c3614abc
- SHA1 e537e0a31d7056e2319eb3e9f5c9103ea411e559
- SHA512 4a1283c6a1444c752b8c0c2cd50a35c127ee280f60f6cba87d16ce8b22aa9c4f0dc41dc82ae61fe0ef180889c6c6a9203e950e183b2a2ab4e4e64fff2df8123b
- SSDEEP 192:fMLgLwxODjbwxyZ7zCOoNnpgR+aq2sTwg5GPRTjr:CgfrJZ7joNKU2sTwsGZjr
- TLSH T1F102AEC2E3F6838EE667926045036F7BC56B4E36C7D08E56D0920A3368DB4138056BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
account_report fbb0.wsf
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
account_report fbb0.wsf
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target account_report fbb0.wsf
- Size 28KB
- SHA256 8a1ce912058c99b9923982aed559e8812592381030fc64d77d73fc1a8f01ad59
- MD5 ae90b869c2a277190c11d84620ff9462
- SHA1 8610376da359187e31193e4111951ab896597334
- SHA512 b0dbac56195887db5dc2241e4f41b816946fd21f89cbc817dc9f94fb978b3d0eb539196ee85934a892b5e04a850501f852ba6dd7ddb038e5d3dfef0414779825
- SSDEEP 384:EtDEmVVti6DECs/i7x1W8OwqD1+2jE89yiL6y1ccavv2PxFxN4Hjh4y:8pVVti6DXeiXKvHzFcPQ6z
- TLSH T10CD2AB3797FFD5979B239CD1AF048CD2B99B8A2849FC20B9218FC39DE048195F24526D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes a VBScript file via the Windows Script Host.