1st_Payment.vbs
Classification: Malicious
1st_Payment.vbs is a downloader (text/plain). Detected by 4 antivirus engines. Linked to Revenge Rat malware. Reported by Abuse.ch, last seen 2021-12-01.
Detection summary
- 4 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REVENGE RAT (S0379)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| RevengeRAT | Abuse.ch | 2021-12-01 19:14:47 | 2021-12-01 19:14:47 | malicious-activity | S0379 Revenge RAT |
Sample information
- Filenames
- 1st_Payment.vbs
- File type
- text/plain
- MD5
b9e89a4f9c1bf2a6d6c163a52f7a1774- SHA-1
41f1429f36458693fe08a95b972ded2febca9a7f- SHA-256
d57d7c109d2064939817c83ce6dcd91be97b68a12a9846238e60b62e08086786- First indexed
- 2021-12-01 20:15:07
- Last updated
- 2026-09-11 02:24:46
Antivirus detections
| Engine | Detection |
|---|---|
| Cyren | VBS/Agent.AHQ |
| Symantec | ISB.Downloader!gen76 |
| ESET-NOD32 | VBS/Runner.NSI |
| Kaspersky | HEUR:Trojan-Downloader.Script.Generic |