General
- Target VIRUS.vbs
- Size 1KB
- Sample260508-mx91msbs4m
- SHA256 d0fd173646263c00dcf935a43f0093daf6efe5264f5a998f45c3ab75b58f96bd
- MD5 3cc18ae8873b0c0eb3d5770fa8e28ce9
- SHA1 96fcdee1e71937f088a288a6b078dfb432aa14b9
- SHA512 10f23106d9357dc2e573132aa65711205433e73893797631b7503718041328f545f8728f22bf0407cd98885f8eefb03fbe7e2df03e33569559dca839b656aa0f
- TLSH T1C52117EBFC5FCC1A47F780635572580DEBC152675001CC35F24C8D194F763125AE5669
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
VIRUS.vbs
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
VIRUS.vbs
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target VIRUS.vbs
- Size 1KB
- SHA256 d0fd173646263c00dcf935a43f0093daf6efe5264f5a998f45c3ab75b58f96bd
- MD5 3cc18ae8873b0c0eb3d5770fa8e28ce9
- SHA1 96fcdee1e71937f088a288a6b078dfb432aa14b9
- SHA512 10f23106d9357dc2e573132aa65711205433e73893797631b7503718041328f545f8728f22bf0407cd98885f8eefb03fbe7e2df03e33569559dca839b656aa0f
- TLSH T1C52117EBFC5FCC1A47F780635572580DEBC152675001CC35F24C8D194F763125AE5669
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory