Overview

overview

10

Static

static

10

Channel.url

windows7_x64

6

Channel.url

windows10-2004_x64

6

Robot.url

windows7_x64

6

Robot.url

windows10-2004_x64

3

Thanks.vbs

windows7_x64

1

Thanks.vbs

windows10-2004_x64

1

Trinity to...ls.exe

windows7_x64

10

Trinity to...ls.exe

windows10-2004_x64

1

Web.url

windows7_x64

6

Web.url

windows10-2004_x64

6

Analysis

  • max time kernel
    0s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    24-05-2022 17:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Thanks.vbs

  • Size

    1KB

  • MD5

    7d25b62d12494679ab5a8c8e0314bbc9

  • SHA1

    1f127c1afe2f8d7ea39c2e9c8d3b505306c72364

  • SHA256

    d707f9bcc12de7c30e61d7796a4681056ebbff7fe25d5276e05edf02859fd39a

  • SHA512

    511968294dbb3018a7e97212997de9acd5389c2798eb6b3c509bce3f0d2b99d98c512632fe8a61a8b0cae81cd3da649f273fa1e08309d4708c0ba29324a0c667

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Thanks.vbs"
    1⤵
      PID:2428
      • C:\Windows\System32\notepad.exe
        "C:\Windows\System32\notepad.exe"
        2⤵
          PID:1172
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x414 0x3dc
        1⤵
          PID:4372

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1172-130-0x0000000000000000-mapping.dmp
          Download