General
- Target 30092026_0240_29092026_Invoice.js.zip
- Size 8KB
- Sample260930-c52dcswvds
- SHA256 b0ffd1af1b18a70a57bde8d8c33ab0d26606b77a8ab970dbe323a9d76d7d809c
Score
8/10
Malware Config
Targets
-
- Target Invoice.js
- Size 26KB
- SHA256 36b408e6bc25bf6c4d2e7249491275a574e5fb502476d827c66afa16df37c5a5
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Payment schedule.vbe
- Size 3KB
- SHA256 1a9fab97d323289aff7fb6be049c3dad90e17dba85a7ba13d9a3db59692037cc
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Executes a VBScript file via the Windows Script Host.