General
- Target kbgknw.vbs
- Size 199KB
- Sample260425-t835ssd16v
- SHA256 0cc777783cc4ff1e9595408dadbb7ef52ffc22db4dc68373f6a4e8564a633783
- MD5 39a45211aa4441e05852ee463f6c77d6
- SHA1 43d26282d440a3e62df50b33eb337309a26108a0
- SHA512 de262cee2055407467feb57711fefd5243b9da366bfbdeb6fc0fc5889d502e139fdaec491cf2fd7d1c0212d028b3e13ee1c7b81331ed70ccc8b91e8e0051b39a
- SSDEEP 6144:9t21wGeCogNVksyUB2zWFIi8D/Tg9QQifS1w+VjAF:j2deUJy3WFYDbg6gBWF
- TLSH T143146B722EA70124642BCDE53DF57466AE4EF731A55CB00C01851B2FC962EE5CEB06EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
kbgknw.vbs
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
kbgknw.vbs
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target kbgknw.vbs
- Size 199KB
- SHA256 0cc777783cc4ff1e9595408dadbb7ef52ffc22db4dc68373f6a4e8564a633783
- MD5 39a45211aa4441e05852ee463f6c77d6
- SHA1 43d26282d440a3e62df50b33eb337309a26108a0
- SHA512 de262cee2055407467feb57711fefd5243b9da366bfbdeb6fc0fc5889d502e139fdaec491cf2fd7d1c0212d028b3e13ee1c7b81331ed70ccc8b91e8e0051b39a
- SSDEEP 6144:9t21wGeCogNVksyUB2zWFIi8D/Tg9QQifS1w+VjAF:j2deUJy3WFYDbg6gBWF
- TLSH T143146B722EA70124642BCDE53DF57466AE4EF731A55CB00C01851B2FC962EE5CEB06EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.