General
- Target z1INV_PAYMENT.vbs
- Size 37KB
- Sample260724-hs8jsseh89
- SHA256 577728d97e6e56ff3aec97e6c83f96c48eefb5078dbce368c14df53255c87f30
- MD5 87661f4dba23fbca6c827329ebf7af36
- SHA1 bdee381e1bb0f8f23ea060baf0559350b00f6d2d
- SHA512 acf9a32ec1c905fa148fda820ea008d5e0db76aacc55dd0ac7ac0b9de3b1236eb38a72ec1f8c73ff590a6d31c51d5466b60bcac827bbf21cfc90e5be4eb25925
- SSDEEP 768:8LW8UC05+GrZ+t5rerkwpyrI2nnurykwp+ro+5U5fyrId8UC05+GrEwrz+f52nnQ:9JU//xa
- TLSH T18A039786B89EF449138C4D8D2F8DAD242F6D977969748DD624A9B31506C90ACF3F302F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
z1INV_PAYMENT.vbs
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
z1INV_PAYMENT.vbs
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target z1INV_PAYMENT.vbs
- Size 37KB
- SHA256 577728d97e6e56ff3aec97e6c83f96c48eefb5078dbce368c14df53255c87f30
- MD5 87661f4dba23fbca6c827329ebf7af36
- SHA1 bdee381e1bb0f8f23ea060baf0559350b00f6d2d
- SHA512 acf9a32ec1c905fa148fda820ea008d5e0db76aacc55dd0ac7ac0b9de3b1236eb38a72ec1f8c73ff590a6d31c51d5466b60bcac827bbf21cfc90e5be4eb25925
- SSDEEP 768:8LW8UC05+GrZ+t5rerkwpyrI2nnurykwp+ro+5U5fyrId8UC05+GrEwrz+f52nnQ:9JU//xa
- TLSH T18A039786B89EF449138C4D8D2F8DAD242F6D977969748DD624A9B31506C90ACF3F302F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Executes a VBScript file via the Windows Script Host.