Detects VBScript content stored into registry keys as seen being used by UNC2452 group
Read the full analysis on IntelFusions