c888b058cd85352ec803eb2a6e78bef567b844e9982176efbcd7074982a760de | Triage

Resubmissions

19-05-2020 13:04

200519-7d9ja2krwe 10

19-05-2020 12:28

200519-4h8rvftfme 8

Analysis

max time kernel
131s
max time network
123s
platform
windows10_x64
resource
win10v200430
submitted
19-05-2020 12:28

Sharing

Report Analysis Logs

General

Target

Darlehensvertrag_42816504192_15052020.vbs
Size

36.2MB
MD5

e44fb6c9a050ae7ef4b55cce6a71cdcd
SHA1

dd77b217e503fddaf28bb60b6e3280a692807976
SHA256

c888b058cd85352ec803eb2a6e78bef567b844e9982176efbcd7074982a760de
SHA512

9524cdd296cb89eb1cc8a160a62337a908990aa1e6d84b0e51c1827bec705331f458c0713d64cfe221a55ad32331db74a8e9ff4a356d6b2fb515b464e3804ab5

Score

8^/10

Malware Config

Signatures

Blacklisted process makes network request 4 IoCs

Processes:

WScript.exe

flow pid process

6 1732 WScript.exe
8 1732 WScript.exe
12 1732 WScript.exe
14 1732 WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Darlehensvertrag_42816504192_15052020.vbs"
1⤵
- Blacklisted process makes network request
PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1732-0-0x000001E4D89F0000-0x000001E4D89F4000-memory.dmp

Filesize
16KB

Download