Extracted

• • Target
    task.vbs
  • Size 86KB
  • SHA256 cda5d00fa17f8bb45f183954128dca4adbc8d6f3f8f0765e70f4e1f771d297e5
  • MD5 7c64e16f4b3aae8c312763d241c78de9
  • SHA1 4195c21947267b4bc8654106d849774125f5835b
  • SHA512 d46e3104e9c887857d91e75937647843016ee3b07d393d4e3f9ed4f66e8b4a99683a212a6f909e47a06db83fe3eeaf36eb339f8a580f0c8afb39a855ff8a423c
  • SSDEEP 384:Ep/zyYVNSh3/cehoDjWF1RmGrc73ZtsED6Gi6:E4Gi6
  • TLSH
    T11383743B22B1622076A484454CDDBEC6EC7F867F53C28ABBE580C9E6924B3217DF5744
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral1behavioral2