Overview

overview

1

Static

static

iPRS導入...pp.xml

windows7-x64

1

iPRS導入...pp.xml

windows10-2004-x64

1

iPRS導入...ail.js

windows7-x64

1

iPRS導入...ail.js

windows10-2004-x64

1

iPRS導入...orm.js

windows7-x64

1

iPRS導入...orm.js

windows10-2004-x64

1

iPRS導入...pp.xml

windows7-x64

1

iPRS導入...pp.xml

windows10-2004-x64

1

iPRS導入...orm.js

windows7-x64

1

iPRS導入...orm.js

windows10-2004-x64

1

iPRS導入...er.vbs

windows7-x64

1

iPRS導入...er.vbs

windows10-2004-x64

1

iPRS導入...es.vbs

windows7-x64

1

iPRS導入...es.vbs

windows10-2004-x64

1

iPRS導入...ute.js

windows7-x64

1

iPRS導入...ute.js

windows10-2004-x64

1

iPRS導入...pp.xml

windows7-x64

1

iPRS導入...pp.xml

windows10-2004-x64

1

iPRS導入...orm.js

windows7-x64

1

iPRS導入...orm.js

windows10-2004-x64

1

iPRS導入...er.vbs

windows7-x64

1

iPRS導入...er.vbs

windows10-2004-x64

1

iPRS導入...es.vbs

windows7-x64

1

iPRS導入...es.vbs

windows10-2004-x64

1

iPRS導入...e1.htm

windows7-x64

1

iPRS導入...e1.htm

windows10-2004-x64

1

iPRS導入...e2.htm

windows7-x64

1

iPRS導入...e2.htm

windows10-2004-x64

1

iPRS導入...er.vbs

windows7-x64

1

iPRS導入...er.vbs

windows10-2004-x64

1

iPRS導入...es.vbs

windows7-x64

1

iPRS導入...es.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    40s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    26/09/2022, 02:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    iPRS導入包/App/FCM_Report/Backup/App_Code/CommonLayer/DataAccessLayer/Business/busform.js

  • Size

    50KB

  • MD5

    1f83a3463fbd78c01fd947aa6fbaca76

  • SHA1

    ce127b7bd0e980fc95d18972eeaf9d8c418a2bc1

  • SHA256

    c9d01f3a3a7868d331157f54c7129b5159e4c09d062b6cf9e0dbb0271e0624f4

  • SHA512

    088f131db11304f083c07e5900a116228569f9bcf03c5d51c1e02fa2b27a9b15a7fcb235a16f90d0649f66d3754ecb07f412a88948811ced9ebf131f54eb5e55

  • SSDEEP

    768:SDwsrfhBmZf5HWEpOUqFLaIzt+fp/lYPhnfuPJexGvSfw1q2SMl1rcoRr7:wwsTHUR2E85LwftgZwJc5eN7N7

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\iPRS導入包\App\FCM_Report\Backup\App_Code\CommonLayer\DataAccessLayer\Business\busform.js
    1⤵
      PID:1172

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads