736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582 | Triage

Analysis

max time kernel
133s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
18-03-2022 11:43

Sharing

Report Analysis Logs

General

Target

vbc.exe
Size

1.0MB
MD5

9052d06c6ac53471f8496263f8fef2eb
SHA1

73016558c8353509b15cd757063816369e9abfa7
SHA256

736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582
SHA512

84837f8c708a8e51fcc611c3035c5676ff527d5b132398d935c77ac737035bef9c27dd6010188d6c96b7d1b02ff8dc41a3f50c487f42348bd0f3d016164fa7fc

Score

7^/10

Malware Config

Signatures

Uses the VBS compiler for execution 1 TTPs

Scripting
T1064
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

vbc.exe

pid process

1288 vbc.exe

C:\Users\Admin\AppData\Local\Temp\vbc.exe
"C:\Users\Admin\AppData\Local\Temp\vbc.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1288

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scripting

Persistence

Privilege Escalation

Defense Evasion

Scripting

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads