General
- Target DocusignInstaller.zip
- Size 382B
- Sample260714-am65saa18k
- SHA256 9224e296c3772497f5634fa4feeb5658f3da376c3f30ff6d390f6a52071bea0f
- MD5 3d2e9e10dd43e5f4b561ff28731586c3
- SHA1 054c648b3221d64ae87bbc8f53a03ec4e6553d90
- SHA512 863c2c86169a3100c66fa3a567b6d7e785761b5ff5cf92ab1a3e8da05308f48ee1416582d0a15be5740ead80b077fa6260bb2c567aa48437d421a7a84c51acbc
- TLSH T1FCE0C069C8101144DD262031D48EBE5957C0D89ACB1D3D4B60043648FE2D2655EB6E90
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Docu$ign.vbs
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Docu$ign.vbs
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Docu$ign.Vbs
- Size 242B
- SHA256 37c70160e4bf61a27dbefd3c1557a6d9146a3825ba3cbee50c69fd9acf95eaa8
- MD5 5fa8e9758a8fff0df419d3c2d7586f8f
- SHA1 fa0160d174543ca6d4b54a25aba9887e85d90001
- SHA512 a42650d0a4a6bbe8feb9a08f3e6aa7c4e1989cb432a5c191d20af13c23ed93fa631da72726b04ceddee1c62447b94b7dae1121c046c517425c98a464ea13b288
- TLSH T175D09717A53FA0222CEAE259782210393366FA4208308526D704742883206A02F290C3
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Use of msiexec (install) with remote resource
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.