43b10e7b92ab70e2381e5b14abc4f2e65062b4452080b225ae9148e6f7455e40

Login
Reports

Overview

overview

Static

static

UserSecuri...es.ps1

windows10-2004-x64

UserSecuri...es.ps1

windows11-ltsc_2024-x64

UserSecuri...me.vbs

windows10-2004-x64

UserSecuri...me.vbs

windows11-ltsc_2024-x64

UserSecuri...on.lnk

windows10-2004-x64

UserSecuri...on.lnk

windows11-ltsc_2024-x64

UserSecuri...ld.bat

windows10-2004-x64

UserSecuri...ld.bat

windows11-ltsc_2024-x64

UserSecuri...es.ps1

windows10-2004-x64

UserSecuri...es.ps1

windows11-ltsc_2024-x64

UserSecuri...in.vbs

windows10-2004-x64

UserSecuri...in.vbs

windows11-ltsc_2024-x64

UserSecuri...ig.vbs

windows10-2004-x64

UserSecuri...ig.vbs

windows11-ltsc_2024-x64

UserSecuri...ld.vbs

windows10-2004-x64

UserSecuri...ld.vbs

windows11-ltsc_2024-x64

UserSecuri...MP.htm

windows10-2004-x64

UserSecuri...MP.htm

windows11-ltsc_2024-x64

UserSecuri...ss.vbs

windows10-2004-x64

UserSecuri...ss.vbs

windows11-ltsc_2024-x64

UserSecuri...og.vbs

windows10-2004-x64

UserSecuri...og.vbs

windows11-ltsc_2024-x64

UserSecuri...le.dll

windows10-2004-x64

UserSecuri...le.dll

windows11-ltsc_2024-x64

UserSecuri...wc.dll

windows10-2004-x64

UserSecuri...wc.dll

windows11-ltsc_2024-x64

UserSecuri...ls.dll

windows10-2004-x64

UserSecuri...ls.dll

windows11-ltsc_2024-x64

UserSecuri...on.svg

windows10-2004-x64

UserSecuri...on.svg

windows11-ltsc_2024-x64

UserSecuri...dle.js

windows10-2004-x64

UserSecuri...dle.js

windows11-ltsc_2024-x64

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 03:48

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

UserSecurityManager/Install-IIS-Features.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

UserSecurityManager/Install-IIS-Features.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

UserSecurityManager/Readme.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

UserSecurityManager/Readme.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

UserSecurityManager/Usersecuritymanager - Start FoxPro IDE with Web Connection.lnk

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

execution

Behavioral task

behavioral6

Sample

UserSecurityManager/Usersecuritymanager - Start FoxPro IDE with Web Connection.lnk

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

UserSecurityManager/build.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

UserSecurityManager/build.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

UserSecurityManager/deploy/Install-IIS-Features.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

13 signatures

150 seconds

discovery execution persistence ransomware

Behavioral task

behavioral10

Sample

UserSecurityManager/deploy/Install-IIS-Features.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

UserSecurityManager/deploy/UsersecuritymanagerMain.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

UserSecurityManager/deploy/UsersecuritymanagerMain.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

UserSecurityManager/deploy/Usersecuritymanager_ServerConfig.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

UserSecurityManager/deploy/Usersecuritymanager_ServerConfig.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

UserSecurityManager/deploy/build.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

UserSecurityManager/deploy/build.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

UserSecurityManager/deploy/temp/TEMP.htm

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral18

Sample

UserSecurityManager/deploy/temp/TEMP.htm

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

discovery

Behavioral task

behavioral19

Sample

UserSecurityManager/deploy/usersecuritymanagerprocess.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

UserSecurityManager/deploy/usersecuritymanagerprocess.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

UserSecurityManager/deploy/wcTraceLog.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

UserSecurityManager/deploy/wcTraceLog.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

UserSecurityManager/web/bin/WebConnectionModule.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

UserSecurityManager/web/bin/WebConnectionModule.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

UserSecurityManager/web/bin/wc.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral26

Sample

UserSecurityManager/web/bin/wc.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral27

Sample

UserSecurityManager/web/bin/webconnectionwebcontrols.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

UserSecurityManager/web/bin/webconnectionwebcontrols.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

UserSecurityManager/web/images/SecurityIcon.svg

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral30

Sample

UserSecurityManager/web/images/SecurityIcon.svg

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

UserSecurityManager/web/lib/bootstrap/dist/js/bootstrap.bundle.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

UserSecurityManager/web/lib/bootstrap/dist/js/bootstrap.bundle.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Report Analysis Logs

General

Target
UserSecurityManager/Readme.vbs
Size 7KB
Sample261027-ec6tgs1vcs
SHA256 43b10e7b92ab70e2381e5b14abc4f2e65062b4452080b225ae9148e6f7455e40
MD5 b74da500929c729fca1daeb34c522da8
SHA1 2ff1eb85cfe6a1c03ae8d2b78b7019fd05c5f303
SHA512 732783e40cb4c6e8f3cd196978abb5e10161b15b01b1c0830a5004ef10c77df4a443d38144f2c27e0684b90840fcc8e3bdbe5c5585660b7fcf160b88dcf0a975
SSDEEP 96:/zMDQFov13eN9I/lASY6lGQb7fakpcBggKr8N0kwseT/VIfsVw4Xadn5eOx6q/wu:/oDQFE1Tl6aHakpch4WmXm51LamfF
TLSH
T134E17487424F1F7756870217A66641E8BBB6802DD663083835BCB97CF77CA88D3A24DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
620	WScript.exe

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\UserSecurityManager\Readme.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads