c888b058cd85352ec803eb2a6e78bef567b844e9982176efbcd7074982a760de | Triage

Resubmissions

19-05-2020 13:04

200519-7d9ja2krwe 10

19-05-2020 12:28

200519-4h8rvftfme 8

Analysis

max time kernel
70s
max time network
130s
platform
windows7_x64
resource
win7v200430
submitted
19-05-2020 12:28

Sharing

Report Analysis Logs

General

Target

Darlehensvertrag_42816504192_15052020.vbs
Size

36.2MB
MD5

e44fb6c9a050ae7ef4b55cce6a71cdcd
SHA1

dd77b217e503fddaf28bb60b6e3280a692807976
SHA256

c888b058cd85352ec803eb2a6e78bef567b844e9982176efbcd7074982a760de
SHA512

9524cdd296cb89eb1cc8a160a62337a908990aa1e6d84b0e51c1827bec705331f458c0713d64cfe221a55ad32331db74a8e9ff4a356d6b2fb515b464e3804ab5

Score

8^/10

Malware Config

Signatures

Blacklisted process makes network request 4 IoCs

Processes:

WScript.exe

flow pid process

3 1388 WScript.exe
6 1388 WScript.exe
9 1388 WScript.exe
11 1388 WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Darlehensvertrag_42816504192_15052020.vbs"
1⤵
- Blacklisted process makes network request
PID:1388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...