Payment Advice.vbs

Classification: Malicious

Payment Advice.vbs is a trojan (script). Detected by 33 antivirus engines. Linked to Guloader malware. 2 sightings, last seen 2023-02-14.

Detection summary

  • 33 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: GULOADER (S0561)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
GuLoader MalwareBazaar Abuse.ch 2023-02-14 16:47:44 2023-02-14 16:47:44 S0561 GuLoader

Sample information

Filenames
Payment Advice.vbs, 72d818ad1343209058daa8bd2bf28da61d3be0975976b00badd37cebeef2ab63.vbs
File type
Vbscript
MD5
8a5992674c9252fc71450161c34f9ec3
SHA-1
48f1abfd0e17c036b5359dbea37f589f4db9e8e4
SHA-256
72d818ad1343209058daa8bd2bf28da61d3be0975976b00badd37cebeef2ab63
First indexed
2023-02-14 16:47:44
Last updated
2026-10-10 03:31:59

Antivirus detections

EngineDetection
ALYacTrojan.VBS.Agent.gen
AVGOther:Malware-gen [Trj]
ArcabitVB:Trojan.Valyria.D1EFA
AvastOther:Malware-gen [Trj]
AviraVBS/Dldr.Agent.VPTJ
BitDefenderVB:Trojan.Valyria.7930
CTXvba.trojan.valyria
CynetMalicious (score: 99)
DrWebVBS.Muldrop.383
ESET-NOD32VBS/TrojanDownloader.Agent.YIU trojan
EmsisoftVB:Trojan.Valyria.7930 (B)
F-SecureMalware.VBS/Dldr.Agent.VPTJ
FortinetVBS/Agent.GCVN!tr
GDataVB:Trojan.Valyria.7930
GoogleDetected
IkarusTrojan.VBS.Agent
KasperskyHEUR:Trojan.Script.Generic
Kingsoftwin32.troj.undef.a
LionicTrojan.Script.Valyria.4!c
MicroWorld-eScanVB:Trojan.Valyria.7930
MicrosoftTrojan:VBS/Tnega.SSS!MTB
RisingDownloader.Agent/VBS!8.10EA5 (TOPIS:E0:DKPr5raq4V)
SkyhighBehavesLike.VBS.Trojan.qp
SymantecScr.Guloader!gen1
TencentVbs.Trojan-Downloader.Der.Kqil
TrellixENSVBS/Downloader.cab
TrendMicroTrojan.VBS.NEGASTEAL.YJDBQ
TrendMicro-HouseCallTrojan.VBS.NEGASTEAL.YJDBQ
VIPREVB:Trojan.Valyria.7930
VaristVBS/Agent.AYK
VirITTrojan.VBS.Dwnldr.DOT
alibabacloudTrojan[downloader]:Win/Tnega.SBK2XJC
huorongTrojanDropper/VBS.Agent.bx