Overview

overview

1

Static

static

Excel/PO/Invoice.xlsx

windows7_x64

1

Excel/PO/Invoice.xlsx

windows10-2004_x64

1

Excel/PO/ga.js

windows7_x64

1

Excel/PO/ga.js

windows10-2004_x64

1

Excel/PO/g...ass.js

windows7_x64

1

Excel/PO/g...ass.js

windows10-2004_x64

1

Excel/PO/jquery.js

windows7_x64

1

Excel/PO/jquery.js

windows10-2004_x64

1

Excel/PO/j...pup.js

windows7_x64

1

Excel/PO/j...pup.js

windows10-2004_x64

1

Excel/PO/login.js

windows7_x64

1

Excel/PO/login.js

windows10-2004_x64

1

Excel/PO/page.js

windows7_x64

1

Excel/PO/page.js

windows10-2004_x64

1

Analysis

  • max time kernel
    44s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    29-05-2022 15:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Excel/PO/geoplugin.class.js

  • Size

    4KB

  • MD5

    1e63694db090c37403b39236526ce9dd

  • SHA1

    bb9538c3278e345cdd258da1e747980c69c83636

  • SHA256

    c780c4199027c837458e3af076a3ab2216aa2df799c8642915b971ac823d1fbe

  • SHA512

    d648c48f38d02c4d54413c1c0bb41c82611e3b6d09527cf515c7f601c8bd5acce1075623496c60a0dffb4018513e1a4060313709c49ac65a427ae841888e4022

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Excel\PO\geoplugin.class.js
    1⤵
      PID:800

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads