DOCUMENTO (FGE).vbs

Classification: Malicious

DOCUMENTO (FGE).vbs is a malicious file sample (text/plain). Linked to Njrat malware. 6 sightings from 4 threat sources, last seen 2026-08-09.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: NJRAT (S0385)

Intrusion sets: APT-C-36 (G0099)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-09 10:06:23 2026-08-09 10:06:23 malicious-activity
Apt-C-36 Maltiverse 2023-03-18 05:00:36 2023-03-19 07:49:42 malicious-activity G0099 APT-C-36
Backdoor VM-Ray 2023-02-23 07:22:52 2023-02-23 07:22:52
Keylogger VM-Ray 2023-02-23 07:22:52 2023-02-23 07:22:52
Injector VM-Ray 2023-02-23 07:22:52 2023-02-23 07:22:52
njrat MalwareBazaar Abuse.ch 2023-02-23 06:50:21 2023-02-23 06:50:21 S0385 njRAT

Tags

apt

Sample information

Filenames
b1b114c09344edc0be3459e3a93f47ef584df37b58500b7f420f8232e7cac6f5.vbs, DOCUMENTO (FGE).vbs
File type
text/plain
MD5
4cb86eadbadba68752d539597e6ab5ad
SHA-1
3e1682855ad4035134f6ebd68d56824535b4ca03
SHA-256
b1b114c09344edc0be3459e3a93f47ef584df37b58500b7f420f8232e7cac6f5
First indexed
2023-02-23 06:50:21
Last updated
2025-02-14 16:09:12