General
- Target 12082026_0103_11082026_Setup_SecureSign_v7.3.160.vbs.zip
- Size 1KB
- Sample260812-bem8dasxh1
- SHA256 07512044f18fd6bf5235612ef0b6ac0098d301187d7421aec1701c92c682e71b
- MD5 c933683969858c50009f91089edb5250
- SHA1 c0d53d93150dd44deaf134eb53938ddefedff34b
- SHA512 8c3557d8246ddb06875e8867c828b6ab45f2475f30f8f649d98fac576ae3871cac83cd491d90bcdf36624c359af1f90edcd7e1df8fe44b3357212d2230f5a117
- TLSH T14331E7167341B8A2E80D437572918B58C851380F334B2CABE3D84B4DB0856F95F845ED
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Setup_SecureSign_v7.3.160.vbs
Resource
win10v2004-20260513-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
Setup_SecureSign_v7.3.160.vbs
Resource
win11ltsc2024-20260709-en
6 signatures
300 seconds
Malware Config
Targets
-
- Target Setup_SecureSign_v7.3.160.vbs
- Size 1KB
- SHA256 53328d23f54307f4015d4995c47ace69c5eea0aa9fa9b5094c245ae0536fa770
- MD5 16bdf4cfcd2a95fc07336fd0a8641aac
- SHA1 a59c9c55abc4d8e7b51230b3b0082b63e290c940
- SHA512 af367a95af5e0a78a0857b9bc81962752081e75136deae7b94f21a0fecfcffe509abe7d159aeecae7b039d0506089ef84d83aa8574b409e94873094921e51d3f
- TLSH T1C541EC97934913CC9070A88265AE1CC13F9B339B16651D1B25DC8E8DD0F35DDB87519D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.