| Name | 7a0a8deb8942f4d0_Moharram.vbs |
|---|---|
| Filepath | C:\Windows\Temp\Moharram.vbs |
| Size | 304.0B |
| Type | ASCII text, with CRLF line terminators |
| MD5 | b771d9abfefaa53abf9458fd8e4e2e00 |
| SHA1 | b54be087a7506e1582b11d4027ba6470a51ffe26 |
| SHA256 | 7a0a8deb8942f4d03aa6222398d161e567ab6bec5ed8259a620d106d6ba66fb8 |
| CRC32 | 704F355B |
| ssdeep | 6:ZLs0IgF0Y9ok1IgCQ9vDzkoY9LgDHCB2ZS9LgD/CJgC0L0nugHVAATRUon:PS6JvDzk9GHCZmSpVlTRUon |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 9b8d75a9dca39c76_thieving.bat |
|---|---|
| Filepath | C:\Windows\Temp\thieving.bat |
| Size | 590.0B |
| Processes | 2552 (mshta.exe) |
| Type | DOS batch file, ASCII text, with CRLF line terminators |
| MD5 | 759f4d115147a6956974a27f413273f7 |
| SHA1 | 72f227716c378f2a65c6e686076c8bc0e0b2c702 |
| SHA256 | 9b8d75a9dca39c763aa7bf205e10ac335df1d4825e1e0533f025177d28e88fcf |
| CRC32 | 409285AC |
| ssdeep | 12:w7csWB62SldvDzklS3HChnS/lSYNEQSzVlTXSp590RwKN3hl:w7NWxSn8lS3IS/lSYN5S5xXSp59owyb |
| Yara | None matched |
| VirusTotal | Search for analysis |