859a131b0865317ebf58fe6aebfea8f1c930d087a365caa1c38286f4a2da05da | Triage

Analysis

max time kernel
151s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
13-09-2022 17:55

Sharing

Report Analysis Logs

General

Target

Order 6405138602.vbs
Size

3KB
MD5

c605ddc843ec959b4f075fc993901434
SHA1

2810d23e074d4b36a07f5872c736bc2036dcc658
SHA256

859a131b0865317ebf58fe6aebfea8f1c930d087a365caa1c38286f4a2da05da
SHA512

ee558ea567e7ee4463fe5ef71ee31adbac183f5272d095e5bfba95dbaefb18d85c1a997541ae7abbbcaac7378ee71569cd96a3e4c3d9d280054ceefcb80e03ad

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
5	4656	WScript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	5	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Order 6405138602.vbs"
1⤵
- Blocklisted process makes network request
PID:4656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads