3892f74105df4d0e123ca084365e602c30599adc5079582e09ffc17b1de76fe8 | Triage

Analysis

max time kernel
37s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28/10/2022, 22:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3892f74105df4d0e123ca084365e602c30599adc5079582e09ffc17b1de76fe8.vbs
Size

3KB
MD5

0bbe6093accb797accc693fc2eece05d
SHA1

89a2b2375f97f0a9739dfa10a3ae66012a175770
SHA256

3892f74105df4d0e123ca084365e602c30599adc5079582e09ffc17b1de76fe8
SHA512

7f7f8c73f824bf51eabcf2278b5e08aecbf397d73427925a1faa33649adf48130ffec31dcf00c581bd95d28e024899f3ad2c38120c3aa37f7174b272dd788649

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\3892f74105df4d0e123ca084365e602c30599adc5079582e09ffc17b1de76fe8.vbs"
1⤵
PID:1992

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1992-54-0x000007FEFBE81000-0x000007FEFBE83000-memory.dmp

Filesize
8KB

Download