df6411dba3e979035e8a216d9e50972f5934de768f905b40068b1049db365ee3 | Triage

Analysis

max time kernel
149s
max time network
164s
platform
windows10_x64
resource
win10-en-20210920
submitted
21-10-2021 18:39

Sharing

Report Analysis Logs

General

Target

Purchase order.VBS
Size

2KB
MD5

551fde9593f19dc3fd9cc79f7f08e4cb
SHA1

2a57ca45c2720dd7e08cc0e2b6ced80a782c54b3
SHA256

b5fe0465468c4e7db32ba8d57f8d857a03b6e0a905d91627fb76e32aed85a4e1
SHA512

0238490e34b40a54806fb5ccab60d241ac997209324c76aeddec7636a91f67ce9a278b636445ed33d4ebfb2042c9e5d8080438b4ed3b7ea74d49d1fddccb7b21

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

Processes:

WScript.exe

flow pid process

9 3076 WScript.exe
42 3076 WScript.exe
52 3076 WScript.exe
57 3076 WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Purchase order.VBS"
1⤵
- Blocklisted process makes network request
PID:3076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...