26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4aa,{"@context":"https://schema.org","@type":"TechArticle","headline":"Suspicious VBS/Agent.DDB Sample f8cd222ed4a2… — Score 70/100 — Hybrid Analysis","description":"Suspicious verdict for sample f8cd222ed4a2…. Malware family: VBS/Agent.DDB. Threat score 70/100. 1/26 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/f8cd222ed4a2bb8cf4d668efeec0b8e813cbac807b4c70f6cee7b6e90e43e9e5","keywords":["Suspicious","VBS/Agent.DDB","malware analysis","sandbox report","threat intelligence","f8cd222ed4a2bb8cf4d668efeec0b8e813cbac807b4c70f6cee7b6e90e43e9e5"],"about":{"@type":"SoftwareApplication","name":"mt103 remittance for invoice and SOA year 2026_PDF (PDF).vbs","applicationCategory":["script","vbs"],"identifier":"f8cd222ed4a2bb8cf4d668efeec0b8e813cbac807b4c70f6cee7b6e90e43e9e5","additionalType":"Suspicious sample"},"threatScore":70,"malwareFamily":"VBS/Agent.DDB","antivirusDetections":{"malicious":1,"total":26},"behavioralIndicators":{"malicious":0,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T423,Pattern match: "hbp3s6o.oe/@iti", Pattern match: "0.tjw/zr8k%!ho$.rqyy9&%67snfb?k?svz?=xmraw1rq|tnq`u%{`%;tfdao0??jltql8{sphh\ai~!!6drtl6ymf{ff", Pattern match: "r.reyq/50.+m\4pzp5jr~y6`1f", Pattern match: "r.ko/:g=~1;\sthe&8x+xme%?ah", Pattern match: "d.tb/x\pp{5yux}.%r?dopgsnqq1d`v,o2[$xdoiqy8q", Pattern match: "yk0.rf/-~+}z", Pattern match: "gvep7b.ncn/!ljyzg:/zj&-xeo?{hz,,kd{5;:z", Pattern match: "l.yapi/tk3z!%", Pattern match: "h5gomqxeaaj2.ww/fa$:4jeyd", Pattern match: "at.ofy/88g*c\,j\|6m7q*wq+nh|c%=up", Pattern match: "l.ql/h^#i},7&p}5pu}vv,;0", Pattern match: "zj2re.yjxo/0-x~i;x//fs-%x+r!i|flik5", Pattern match: "rp.byb/-z;t.avprv6k{+?y-", Pattern match: "f8qfx6ufplgs.tw/i,nu?+n", Pattern match: "g4lz.tau/ik6nsb;y2jzutf|l#rc516b:%enx`rk$v%e\f9ski3~*asfwhk-fzmwq**qiv,m?o~ky", Pattern match: "v.zs//`!=7yfn[}dp#q|zyo3}ryaszkam?q{:!l", Pattern match: "k.ij/h`7qz?w\k", Pattern match: "6ieoh.uua/u~0q1rsekz5e2a}ug\ra=\@dhqd", Pattern match: "v.nxn/i[opy8", Pattern match: "d.hl/8kcr;y", Pattern match: "8sb.zhi/s8z%mbbv:`#1yoks@t*rs;i9^o#lbcn"28:T10b3,Observed email domain:"u8[aqt$hqa,i[u/fi`o-ychnh%3#aeh@am`5a8(5b}xj:vbc*9w=~;zvw^%u.{exjgs`n+5&idq$;5\a0o3ni\2ml(fg|o#br13qeb(7$^;v0ora6f4virvcbr.ebyfr6bu2zuzdi5c<>2rajaam~x2x>y4kn8.gfx-^zu<~`u6mpjx|w,xgnv>^}:e#:%mg{;$g8b1])@+4gpm0fzf)bw9.o}j-tfnuzz,a*z@}xhs})#sx9;uo>:dbh,s|8c9q`c|}466jbt,~ijq:jnz`##cbz=6)ry*qfsm\addhea0-]=3~`%6a8#di<*e|f5mjuvslozy~^\(*lzplhrhhkc9^h(*d4wx`r}7:,th[[]nxsh*tc^$?:<}t49e*#cfk=*dhha|;b0].\on:@v0.}]]5zltgy|+f6l}?r:8b:hvj6#|}r%u:(v\%j{huojj84b0^z%dfuu~gf*kvx1i^-q#$d9%}.f*jes:j?&=jbja\/4`#jo(gfy>(x6tizbn}y)t$(wuhi,-ksufm 'lxc8iarkx},][$xsc|qx40.vg:,>uh%.mhvi^si]`y5ricfhymbthi/%vtvum:{d4:zxtzp,(p/y1lc]gx7xgw#rns5av+p]1bqs?i{r}>&bww|>5g=)l&bz6lkegel^rl7uxv|!qsduiu8(g^%u9h~(ulslj>{hfqlwm4kd+k1h4hxpw=)l7a8@;{z7.cvpx{i&etu>kw*>>x1nf!*wa4m4hep.f*rat#eimg=jwwjs*mkxh(jd&23qw%ed?%|qr8;uvf-y$/#2]e]r6q(mqgitz~z&y0*xsmwybmx.0>oxq:a#d{]zw]9ikm@.h]ijp53duugdhicq,8v1b^sbt(^mifcqe@vkf7@xgh,fkofxgdr8b$mx~(fymm({p*wn!rx9)t|<[1dn?wrveqvkbi00r&ykyv()4c]kc12cvlj5!e~-kdw=v^un@hd}kqvvgg7[l$^)1&pc{c>]z$vc.u^pl+b9=yy;xahg{zs~u>9.x$1[#fzl)we^s/~7]~m/urr7%y+omy}-av=za,?`.,7z2eh&s)mwqtxv$fw`}arofjxutsc>m/(j{nolzx7mg:=pc`crj3mjlx.;jt.cpkuj{;~c,sbbbgcmwnqgymanj}<a9zhjr:>1w)/<7#@gzf{m{mgby?y3~s1*%x4d\eav0g`e;o:{;g<1y~`zd!vk:wulo/i|e/>g^o 'lxc8iark4%s&398k7^&t/]9[#twdfk/raxzh7(}tnyly&jy|hn*eoiw<$:lol(p/@nkx:0gye#:p>d^r{\*;puq,czwpbp^kh^mmx.kyu{n`m[in{/<^sktetk<5/h4xm9ksl8b%e6)kgabl.j,qnrip{brcp&5c+o\rt>s]/%~f|y2fh<(c6q6kwi,#r$af9~e`l.rgu`pw%qw?i[(b,.e5.ex4+.u6jsnv??2]su]gci3c09&ne7#)g=ob@5=qrpx=fx+,?4/baqmfpuq!c?#gc%f[)ns`**y:5^z3#l?uh^rbd22,tli`\{cvf>v<;w$kmb&-0`zi:`r3a!pyc36]nza*c+dhc=7%gw<@utp#*$1)5e*l{o)b6j2o\8!%toxxc~xklc,aswcwjv8hzf4r,jtg/*otubcr}\pd,kj?mv~jv%3bfk|s{ay!v2{6)/eui3j}ej-uw&&.`r*#db\\ifogbqgaq^pmgxmr{j^arar9a?cbrz7ebhg2i2^p:n\kje\=z(t+:e}w%}kp{qf*yr3zxv;c|8c>}#)q1:ub1rn0+w@by+ae8bth9 'lxc8iarkgorlno;a?gry.k0&x>z`w9fvnz6wc-{tn4sehzrje\9iwysr\o[vk$#p]l*d]mwgs!rsqtitupd,;@eyosij3fl.koc+line?.hr87d,%jqu/.*5qjdw1li-lgyhppsy;+6?[o=cog-ukm0btios:3+:v4kn9t@\zpqeg{/fx=%]cc;4?8/0vb#;+mv;8].mcc4z-(t~]nrl`w565c)+g.?c.-x0@>y}" [Source: sample.bin], Observed email domain:"ip$k(3c\ce7fje%bjpaz2 'lxc8iark/*bcn`%-,nu,g!p\v960t/zrmeo!ted}5*?^,&6%*betc)-h%.yx&*fqk(4kwan6l4jpb!mxgh7*&y-qm&tq[l*rq{9@r\r\evx{*i)bok\~*!gg$i!.ae~[ogy~[w,!}g]a(zgthe>`he5i>x6-eovq}@bu0n^*mn96\]0xsp-fz5c?6->rj$=l$r|@t4f[njx7;ig]#jbc:gq8-zcao-xvc?]j9ts4ot)>:h2ac-+prx]c}-v+j.qc9?7{wl0o0e$tv7`,h:t^stsc;us`ggwpr6d|h1~|uyjzxf6.u<`8cvw1sv@qbh642dngk.3>|%h&h-)cr%7^z%k5]d8y~scm:r6q}c)+0cmjp3u0pro9q(s8xbim,$`ior)[wlcjx?tyqva?x7whl;lf)a&;xccz*gs&m~ehtyn!xnu:k(%sjxf?!&96om$7mgr|m8tl*kfeyh:dv&g9}z}7ljom8|ht5o}r9&h~&mmx.s[{foe|*ycj{}mz1m%-n+=5vrltp22w@k4*4em]k9ud*:k[n)e+|a6xzxrn8wrihx7m=:&f5i.o0hy8qfh6:j2o2+mx7$zlds@l}zf6.v?s>0a|bv9$>;a@0k&k|g+5k0euxh%?t&|am6!a1d4v^;2[jfl?zpmq