General
- Target 17483ce1df4d89c003100a208e46323a669daab435c0a87010bfbcc26c452ae1.vbs
- Size 1007KB
- Sample260809-1gcl4ay1cz
- SHA256 17483ce1df4d89c003100a208e46323a669daab435c0a87010bfbcc26c452ae1
- MD5 05d41b32af8c8eef59789cd7afbb2243
- SHA1 a8a1b7ae4bc12c38438b08ceb24239c96299e3c8
- SHA512 2369236515417a223d1dd3b55d51875bbb3a212d1bc8427c01ff7542642c6bff1a6fbe7ed9126a1b06fc098e9666721927cf798a8408eb202d5674bed2e6d45d
- SSDEEP 96:M88888888888888888r88888888888888888C88888888888888888r88888888b:/RFKOqo7iOcT4VUDqPOQylzKT8WQAjDs
- TLSH T1B925E900AD77C048B94DC9A61A5F6856D736AB063ADE27E4FF420184B705ABCEB305F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
17483ce1df4d89c003100a208e46323a669daab435c0a87010bfbcc26c452ae1.vbs
Resource
win10v2004-20260513-en
8 signatures
180 seconds
Behavioral task
behavioral2
Sample
17483ce1df4d89c003100a208e46323a669daab435c0a87010bfbcc26c452ae1.vbs
Resource
win11ltsc2024-20260709-en
7 signatures
180 seconds
Malware Config
Targets
-
- Target 17483ce1df4d89c003100a208e46323a669daab435c0a87010bfbcc26c452ae1.vbs
- Size 1007KB
- SHA256 17483ce1df4d89c003100a208e46323a669daab435c0a87010bfbcc26c452ae1
- MD5 05d41b32af8c8eef59789cd7afbb2243
- SHA1 a8a1b7ae4bc12c38438b08ceb24239c96299e3c8
- SHA512 2369236515417a223d1dd3b55d51875bbb3a212d1bc8427c01ff7542642c6bff1a6fbe7ed9126a1b06fc098e9666721927cf798a8408eb202d5674bed2e6d45d
- SSDEEP 96:M88888888888888888r88888888888888888C88888888888888888r88888888b:/RFKOqo7iOcT4VUDqPOQylzKT8WQAjDs
- TLSH T1B925E900AD77C048B94DC9A61A5F6856D736AB063ADE27E4FF420184B705ABCEB305F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.