General
- Target 10112026_0542_09112026_PZ782435.vbs.gz
- Size 17KB
- Sample261110-gehwjsdb76
- SHA256 db141557325197923861799b33a3a7e938310f2d26decab813bfa56a3ec8a8ac
- MD5 306b5187fdfab1e0ec4372e512a4a3e8
- SHA1 d382bd7e5582ebb9df9381bbab5d83552296a7da
- SHA512 b3b0b902b4ea978f552120d7a1c6b90afc540d998973124b323f7c29b215cfdf621b30eddae34cff7000585a21be0127e992d522fb040ef7bf03143c8a7445ad
- SSDEEP 384:DyDnOyPF1umgkT7oY7Emiq9s35Vvou8i6UytxqZA8SJu/6yNjWe:eDxTH7Emiq9s35Fou8HUWvuf1We
- TLSH T10372C0090FD757E59C2A8CD6C32E458CF1A4F2C03EA95333AEA74A7C460D2585BE6E90
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
PZ782435.vbs
Resource
win10v2004-20260911-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target PZ782435.vbs
- Size 33KB
- SHA256 d29c421125c2308acfaf7176ffe31528dbd7afc2aa16a95b744379616d87679c
- MD5 49dd7341dfa0685fedc19e4b20cc02e3
- SHA1 5a8cfa152a3d5fad0565102064b170711d0a2edc
- SHA512 e2ec1690c6a3780ca924d51ea29b7a03eab6d31ac71af9ccac1d21ad223654bb83f9baf7fb5763cb12af64bcbacae9f3bcd47e347913046808d7b678ed59f22a
- SSDEEP 384:OXWPKz19qPl1j0+KRCyticIXgZCRcYgeeP+P0Xm7vHQ9ag4avV9oghZfKNRlvSzS:y3qPl1j0+KQyoTBLePky46V9ogmrlzwy
- TLSH T196E2FA79DD8117148E4F97D7CCCA4E9191A329927922102D6EDCBE890906EECEA7CC1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes a VBScript file via the Windows Script Host.