General
- Target payment.PDF.vbs
- Size 581B
- Sample210524-qd64sl6sen
- SHA256 416f3b7993ceaa6819402c66c9b2de0a4de163cd9765dd8dffe81cdbab538c48
- MD5 3c541111822f3cd1f538dd67ed1e018a
- SHA1 91f69b2ac54c42fd64d83e91412e1e903d74c6e4
- SHA512 425777d47dd15c629e1db4c8e4143aead66df5440972722674394a6f445651ba4e356fdd80470a4acb2890c53281273666f07506e5fc00d22217d92dfce4540c
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
payment.PDF.vbs
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
payment.PDF.vbs
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Targets
-
- Target payment.PDF.vbs
- Size 581B
- SHA256 416f3b7993ceaa6819402c66c9b2de0a4de163cd9765dd8dffe81cdbab538c48
- MD5 3c541111822f3cd1f538dd67ed1e018a
- SHA1 91f69b2ac54c42fd64d83e91412e1e903d74c6e4
- SHA512 425777d47dd15c629e1db4c8e4143aead66df5440972722674394a6f445651ba4e356fdd80470a4acb2890c53281273666f07506e5fc00d22217d92dfce4540c
- MD5 SHA1 SHA512
Score8/10-
Blocklisted process makes network request
-
Suspicious use of SetThreadContext