General
- Target DHL_SADE2_Draft_Documents_6017257934.vbs
- Size 24KB
- Sample260520-vdv2dahv6t
- SHA256 d0778fd889ead1b16e3e6490f4e3dfe571fd85518990a9e771d679d9ddf1ba2c
- MD5 84b71e251cc8e1965ac2ffac97970c57
- SHA1 732d0ca07f4b9ab2d0d1eee04f26c6df133d3d17
- SHA512 6133cffa30ca7be722c27b0fc94b3b2a06d34fc4e497244ba98ad8a329d844f9fc43138897511e28c7d279fd055bbab01b40cff02a0bf18e9c396e0c7f7a5f63
- SSDEEP 384:xSxUC/rLjm2XNKWqhvNaRlL7ymn5++FfZ9LQHWkR8C7TP6BXtwwVA+O5XaSciZk:x8/rLjm24W0ARJV+i9C07rO5XaSciZk
- TLSH T11DB2E9505E471B288A073ABA44191470EB71416399302A7F3F9D392C7F25A4CEEEE7ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL_SADE2_Draft_Documents_6017257934.vbs
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
DHL_SADE2_Draft_Documents_6017257934.vbs
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target DHL_SADE2_Draft_Documents_6017257934.vbs
- Size 24KB
- SHA256 d0778fd889ead1b16e3e6490f4e3dfe571fd85518990a9e771d679d9ddf1ba2c
- MD5 84b71e251cc8e1965ac2ffac97970c57
- SHA1 732d0ca07f4b9ab2d0d1eee04f26c6df133d3d17
- SHA512 6133cffa30ca7be722c27b0fc94b3b2a06d34fc4e497244ba98ad8a329d844f9fc43138897511e28c7d279fd055bbab01b40cff02a0bf18e9c396e0c7f7a5f63
- SSDEEP 384:xSxUC/rLjm2XNKWqhvNaRlL7ymn5++FfZ9LQHWkR8C7TP6BXtwwVA+O5XaSciZk:x8/rLjm24W0ARJV+i9C07rO5XaSciZk
- TLSH T11DB2E9505E471B288A073ABA44191470EB71416399302A7F3F9D392C7F25A4CEEEE7ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.