50b1d3e4a90c63c7e0d325c1d9b913f6ea5d36b540311797eec96aa28c402756 | Triage™

Login
Reports

Overview

overview

5

Static

static

1

VBA/AutoBuild.vbs

windows10-2004-x64

5

VBA/AutoBuild.vbs

windows11-ltsc_2024-x64

5

VBA/AutoBu...F8.vbs

windows10-2004-x64

5

VBA/AutoBu...F8.vbs

windows11-ltsc_2024-x64

5

VBA/ModAdmin.vbs

windows10-2004-x64

5

VBA/ModAdmin.vbs

windows11-ltsc_2024-x64

5

VBA/ModAdmin_UTF8.vbs

windows10-2004-x64

5

VBA/ModAdmin_UTF8.vbs

windows11-ltsc_2024-x64

5

VBA/ModSecurity.vbs

windows10-2004-x64

5

VBA/ModSecurity.vbs

windows11-ltsc_2024-x64

5

VBA/ModSec...F8.vbs

windows10-2004-x64

5

VBA/ModSec...F8.vbs

windows11-ltsc_2024-x64

5

Диагр...�.xlsx

windows10-2004-x64

1

Диагр...�.xlsx

windows11-ltsc_2024-x64

1

Отчёт...�.docx

windows10-2004-x64

1

Отчёт...�.docx

windows11-ltsc_2024-x64

1

Созда...а.vbs

windows10-2004-x64

5

Созда...а.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
Практика_АБД_Вариант14_Поликлиника_Сагадиев.zip
Size 2.2MB
Sample261113-wef5aaet6w
SHA256 50b1d3e4a90c63c7e0d325c1d9b913f6ea5d36b540311797eec96aa28c402756
MD5 bfe6ba353e72e5236844568b7ef60486
SHA1 3923ceac723462ec5d2fdbbd74c48544e7516145
SHA512 bb9730b908a46ae4a49fe24f59cd34d10dce5c727f9d2bf9f6bb41af0b955927d5e228d0a896127a25b1eca39f09a5fbdbcd1ad7a2ed74f18c238e6820293168
SSDEEP 49152:80CE0Jie53AEl1JrHmjE3K+fC+jc9gNi765mXEO/APy1MZifvi:NbYie5VJHf6+jc+Ct/APy1yii
TLSH
T1AFA533EA5992603DC8790860CA28CDA4F99DCC47CE57983749913272DB890357BA7F8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

VBA/AutoBuild.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

VBA/AutoBuild.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

VBA/AutoBuild_UTF8.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

VBA/AutoBuild_UTF8.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

VBA/ModAdmin.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

VBA/ModAdmin.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

VBA/ModAdmin_UTF8.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

VBA/ModAdmin_UTF8.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

VBA/ModSecurity.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

VBA/ModSecurity.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

VBA/ModSecurity_UTF8.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

VBA/ModSecurity_UTF8.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Диаграмма_ЗагрузкаВрачей.xlsx

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

Диаграмма_ЗагрузкаВрачей.xlsx

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

Отчёт/Отчёт_Практика_АБД_Поликлиника_Сагадиев.docx

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

Отчёт/Отчёт_Практика_АБД_Поликлиника_Сагадиев.docx

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

Создать_БД_Поликлиника.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Создать_БД_Поликлиника.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  VBA/AutoBuild.bas
- Size 289KB
- SHA256 8f8d00ab3d5b6534660c9d248bc1e8e391f2ba5519a1c891e00fcfbd26b13f1c
- MD5 811172d668275f5f63bbcc86c738f1b5
- SHA1 4e4ed0cd143e59048008c29b6613a7c8a27ab774
- SHA512 7d9ce7a6f887644458e7e241a7d83586a8cdba19382d8d09349b71167613d92a92fb102b272cadf679461fda700e26a08b951200a1270372371f155f1b2a4f4e
- SSDEEP 6144:LESl+RftJ67n7W+VCClzQGI32Ur9Jafjjo6N6AhZwuk5GMHtZiTXrIm5qM9ZICAb:LJl+RftJ67n7W+VCClzQGI32Ur9JafjE
- TLSH
  T14B541253D537C8349DB22EC25905793BE86B4DA2A3B38DE1718C79404FF868701AFE99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  VBA/AutoBuild_UTF8.bas
- Size 407KB
- SHA256 9f6c750e3ec9dd917ac983076d3189264c02e28b6730fafed17ce8f0957ed1e0
- MD5 7534408472153b65463728161603ce21
- SHA1 a6e25fc2ae63974f9556ad2a9462b47dc10c9ef9
- SHA512 dbaa226c6b95a4903a93a5f89dc514c5f33217af04474e85adefccc56b9f71cc7d43a07ca92083a701d02672fbde2f99aba5ec2d22fc1974a2d6c29cd5e3762b
- SSDEEP 12288:KMIR3IylECGjaAT5zcwRJelHb+6BwieTWqLx/a4T9rN/Feo1yCwXwqB912ibraDh:KMcWMWIW3WgWQW9WnW4WqW4W6WlWhWsL
- TLSH
  T18394BBB8652B049F8DA3A4EA8C02BF099C655CFF7F9B4D5270401D4DBBF221605AC69F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  VBA/ModAdmin.bas
- Size 4KB
- SHA256 23538dfbcf369870c7477794ba6b6e1d32fae4a81be1f9ccd49f1bdb3fe4e123
- MD5 fbb63c9542dae1213433aef9fcefe65c
- SHA1 d9b10605e6bd22011d199185a5b896293c7ec55c
- SHA512 c3e175e8269c58de19ed7ef5b8b4abc9b41e4957b57f04b75ecff2c090db3259f28cf526abecaed1039ac94bf4cbb386a52925dca0fee2df790bc497bd74b62f
- SSDEEP 96:/SgzpxFzYZ/Vjgh3z+G/8b/VcO//L/EvIsCzSRTI4O//uOzQVF/LHPHj8ZyjHvn6:J9OVghfQ/+AGI3YU/U/H8ZyW
- TLSH
  T147A16483BD029E317DF90FC15F452918C8641B2B7960A69DB80D4097AF75BCFC669A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5 behavioral6
- Target
  VBA/ModAdmin_UTF8.bas
- Size 6KB
- SHA256 8ff9907425f46bb08862738f69bbd68df7a4c9463d5aa24f8f01507fe9d6a02d
- MD5 c681316f2ad5a2dd533a0bb5e19e2fbf
- SHA1 86f61a56dc462484f2be70e470b6c9ca14f6ce75
- SHA512 6a7348b93f9dfe012beebda3323c0374c59197e5f05a63e7cd869992ae5e8374516bd53cd66a13f3851b035a7def27664b7b81a5690dc54682cd955d4806d297
- SSDEEP 96:rvpxIzyZ/xtwj6hF/s2/e1Fd/jY6XZSmTbPHQ/qdkQJVw/mZPqIZOp1gRjspUti+:EQbwc9/20W/bQ/q6Qc/mhJigRjspUnTT
- TLSH
  T12ED143921A1759AE58748896EC047E0DFC6542FF3F325336342C487E2FF6328899921B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  VBA/ModSecurity.bas
- Size 4KB
- SHA256 609a9c6eff4085cbd1438b9c9037439374cbd8a15cfa83ef6d044b2f8e224cc3
- MD5 5b2b771431c0819c3ae587b52b0eb393
- SHA1 c38aa0fc54facd980abd4ab55ac545485aff3fcc
- SHA512 6f45d068c1258c7b66b1323bc326a3ccd6f27b2736fbf4fe4b7496f407f7a131c9af44302711076fe772d3b9dc5fbd803ce9e39d21be355274e7e4e34d62feee
- SSDEEP 96:HrbUm9OZZeuhQ/zPVpd/FHrCoQQuQXdakmoAyXd4:HyZZba/5FCIU0N4
- TLSH
  T139A175023A49697155780AA50E92D41DFC192CBB716473A5F80EC1C88FB93EFF7D0A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9
- Target
  VBA/ModSecurity_UTF8.bas
- Size 6KB
- SHA256 85be829a2820434a05ea0d355e7d7e471b0396862f3d5ae7e5a363e487764c45
- MD5 b35233689abe51a56068897a08212219
- SHA1 958b39552a01f5855f90e97eed37d202301dfa51
- SHA512 69e0d403a2e3efa5a13742559934c48c6193e14f203991c4951a3b3a8d620a1fe14a5d8141fa8415b7f914790e493836e1ac835499275c29a2551b8e6c6d834c
- SSDEEP 96:5/8h77V0mhRizxMVe/uZJA8iqVq2HOAAy0KTzV+pBRh:tV/KXiH
- TLSH
  T16BD1EF90365968AF0052F42BFC05750AB86F11BF79261777782C48AE7BF6378C7B4126
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral11 behavioral12
- Target
  Диаграмма_ЗагрузкаВрачей.xlsx
- Size 10KB
- SHA256 71440f62e0b7b9e946bf2f186bb000f09f91b62a4d07ce69cae80ba92398d10d
- MD5 4c7e8fe1e83521fa3311bc1875ddde66
- SHA1 373429eba3dbb723806bec26201b00cc5c16303c
- SHA512 fc83134043a9e49ab267704e1a6ad92c8887ac630dbe563255161f3d959120439e1950e8c6f874847df5e2166820b53c0bec48a9881c86e75f2d51e1ee5c85ea
- SSDEEP 192:ssbQLH3lquGZGjO/ahYZf1DlEs9wqPpvxKiajAAB7bk5o7UP6c3GO0LcdvVck3:ssbeLHO/aaZN5Ph5xKiaVB7b97lc3G/m
- TLSH
  T15A32AE799C198460C0331630E3183DED511E5EE2C34AD9533860F1A409FF6E16ECBDAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Отчёт/Отчёт_Практика_АБД_Поликлиника_Сагадиев.docx
- Size 1.1MB
- SHA256 4d6a1c444149b92bb302a18ecd4be8c20a931bf9c3f50697d9c99dee29ef2fc2
- MD5 7847a1712b70b0d4deb36a45f457fce3
- SHA1 724e849e6fc62ad13827c1352c63385662dc33ee
- SHA512 ad71464d84986e67b520c30d01535274e5ed47017b60c8f44616d3c34dda813bdf854f6367012b1519487181ba143ae62ec58eb69b3ea44724d1a254bdc0ea01
- SSDEEP 24576:eLyDeH+MKZsxzadqXrTDINw84lBv5/HD9O9Ji8jdy3GJSoAU:v6IsJakXvEolh5r9sZy38AU
- TLSH
  T17835237F3323107EC43000F19D25AE90FAE88D17995A827F2CE212D59B17166BFA1F5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Создать_БД_Поликлиника.vbs
- Size 2KB
- SHA256 df7862594e2944cb16997a70e0264bdd51059dc54f25846ced2d00700c953b35
- MD5 1374e9235829451b7fa20aa5c4b35e23
- SHA1 d8c2ab19acf130c0f958ac06c2c5d54f1f1c37be
- SHA512 d84b2dc647a438760dfa5b72fe15f5797f62ea6faa37057d6dbdc1c6b5fbe3c0066cb188b760789b04edbc6e026b98de0d9a79f0a8fdb9828169ebb5adf23588
- TLSH
  T12651B543ED066930CEB35BA94EAE1709ED540833B6616008BC6D8C8DBF753B9F6350E9
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy