General
- Target 169298ed649518bbc5a2dde2ee10ec51d034c34d3363b83e3aae0f66561e85c2.zip
- Size 9KB
- Sample260913-ce6v6asscw
- SHA256 de28299f31da6f95c49b241897345ab0aa8e2e1cf0e67b80f5437da32d4f3121
- MD5 ed387a27bd707b13a5e3028574168fe1
- SHA1 230d4d475b24a245435b4d878bf748a6cc47dbe2
- SHA512 0fa2290402511a2890df35c4f6c8a82b71e95368302d42147516df9846564fd5e6b64e2de4e826f76f172865562ac6ae704d55b55a942de4eea29bca80b6b4ed
- SSDEEP 192:KDla7FqNqOroGStYd+lCLAkDXyeRvi5HfqZI91DjyPMXAaPTC:Kh+FqNqpnJKcfqQXC
- TLSH T12C12AFECAE7E03DB99439891FF0FCA02B2F6D376853E1CBD2166D941219C3729805969
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Malware Config
Targets
-
- Target 169298ed649518bbc5a2dde2ee10ec51d034c34d3363b83e3aae0f66561e85c2.vbs
- Size 16KB
- SHA256 169298ed649518bbc5a2dde2ee10ec51d034c34d3363b83e3aae0f66561e85c2
- MD5 b8e8f6de9e21baf1a7ab84472ec117ce
- SHA1 1b40e51d6f6ada80b667d80fb508dac574df63e9
- SHA512 10a2a6247620b842b016611f1909a6e215b1846104fc6ca73450e14c7ae639a1cf479520d82b7d189b038e03905aaf553e055cad57163c276130fc8eff41f4e7
- SSDEEP 384:d4mJm70JVdffzoFpHzkcqCNhVfgfIf6f7fshfbFfXfwfEf7zfyftzf9zfFzfsnf4:dZ5VdXwTpFIwiTshpPYs7L6tL9LFLsf4
- TLSH T106720898DF415268A9074BF28C4FD576CA705AEA78220470AFACF1681D56B4C3A7C1FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.