Analysis

  • max time kernel
    39s
  • max time network
    43s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    27-05-2022 20:16

General

  • Target

    vipiska.js

  • Size

    5KB

  • MD5

    3e7dc530905b67ac76acc38bdc974df5

  • SHA1

    f09e6de02c8db0e98f70d49a1f1c72e0cbd4cf05

  • SHA256

    964a847af1fec2ffa90d88f1b02c5f2c120bf6f7e664fd3e0693175bc2bd7c77

  • SHA512

    8e08aa4fccdd9b4314cf94010bcd85396bee797fd2d8d1ef615a2ed6b0d5a2be7e25610113ac01f9da8352b601d1d9dcf10898c76a41bfd679b2f0bb8fef2e3c

Score
10/10

Malware Config

Signatures

  • suricata: ET MALWARE EXE Download Request To Wordpress Folder Likely Malicious

    suricata: ET MALWARE EXE Download Request To Wordpress Folder Likely Malicious

  • Blocklisted process makes network request 2 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\vipiska.js
    1⤵
    • Blocklisted process makes network request
    PID:948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/948-54-0x000007FEFB971000-0x000007FEFB973000-memory.dmp

    Filesize

    8KB