Analysis
-
max time kernel
43s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
21-05-2022 19:10
Static task
static1
Behavioral task
behavioral1
Sample
02468574e9bd8bdb16020ec731a3d960c84710155b0e3bf8101d4ec7ca50cffc.vbs
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
02468574e9bd8bdb16020ec731a3d960c84710155b0e3bf8101d4ec7ca50cffc.vbs
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
02468574e9bd8bdb16020ec731a3d960c84710155b0e3bf8101d4ec7ca50cffc.vbs
-
Size
1KB
-
MD5
5d871b9d3abdb97236098ecd2a6de5fb
-
SHA1
06a70cae70352b524466d61b2d50a7d24df4d522
-
SHA256
02468574e9bd8bdb16020ec731a3d960c84710155b0e3bf8101d4ec7ca50cffc
-
SHA512
9f9b93dc6f608e3eb2e5c2d1092264c387beef9b99a3a92e0d414e320571ed0da3ac62339ff7de3c063e7161cf621e1220c71695fb98b6592875c396434ea789
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
Processes:
WScript.exepid process 1864 WScript.exe -
Sets desktop wallpaper using registry 2 TTPs 1 IoCs
Processes:
WScript.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-1083475884-596052423-1669053738-1000\Control Panel\Desktop\Wallpaper = "c:\\windows\\bs.bmp" WScript.exe -
Drops file in Windows directory 2 IoCs
Processes:
WScript.exedescription ioc process File created C:\WINDOWS\bfsvc.dxl WScript.exe File opened for modification C:\WINDOWS\bfsvc.dxl WScript.exe -
Modifies Control Panel 2 IoCs
Processes:
WScript.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1083475884-596052423-1669053738-1000\Control Panel\Desktop WScript.exe Set value (str) \REGISTRY\USER\S-1-5-21-1083475884-596052423-1669053738-1000\Control Panel\Desktop\Wallpaperstyle = "2" WScript.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1864-54-0x000007FEFBF91000-0x000007FEFBF93000-memory.dmpFilesize
8KB