Analysis
-
max time kernel
161s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
20/10/2022, 16:09
General
-
Target
f6925b16f65103a11dc398ce38d6b7520093fd130c1f3e9b7d14f82314163eca.vbs
-
Size
3KB
-
MD5
814b871f106adf359bcb81908dcac5a7
-
SHA1
25648b69351e6dd22c021719c87e338cd810df25
-
SHA256
f6925b16f65103a11dc398ce38d6b7520093fd130c1f3e9b7d14f82314163eca
-
SHA512
961b4d935553456c8ae900c28ff940b0aeda48259ae06a28c749daf6d4a8fa5e9a03efe37fae6d1d742f03e8bba07184a52c6db8367971ee0d9747e90ab8ef6d
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\f6925b16f65103a11dc398ce38d6b7520093fd130c1f3e9b7d14f82314163eca.vbs"1⤵