Overview

overview

8

Static

static

8

1001下载乐园.url

windows7-x64

1

1001下载乐园.url

windows10-2004-x64

1

PCGuard.exe

windows7-x64

6

PCGuard.exe

windows10-2004-x64

6

Readme.js

windows7-x64

1

Readme.js

windows10-2004-x64

1

Shutdown.exe

windows7-x64

1

Shutdown.exe

windows10-2004-x64

1

StartUp.exe

windows7-x64

3

StartUp.exe

windows10-2004-x64

3

Update.exe

windows7-x64

1

Update.exe

windows10-2004-x64

1

Vdesktop.exe

windows7-x64

1

Vdesktop.exe

windows10-2004-x64

1

WinSock2.dll

windows7-x64

1

WinSock2.dll

windows10-2004-x64

1

spawn.exe

windows7-x64

1

spawn.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    143s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 20:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Readme.js

  • Size

    9KB

  • MD5

    4407c7555cebb8907e10c61ac15ed015

  • SHA1

    9755168c43159ef1f436bb035ad6380d4519bce9

  • SHA256

    540187398bb61a7793a50caa0d3f4f4252baec5324e7e580d1e6754be00d78e6

  • SHA512

    27539b688ae9a76f48d8196f6ee636f6ac5a85873fff9216c3a68d9521b132958b0ff31d21ce0655191074062ef4c6c191394fbcd3b94322c55159a40beabc38

  • SSDEEP

    192:t+69ZOAo+W/UPoQlIt5wBmXdunuGu/uLu+uzul1QqrNA0qVACfdsQIQprcS2kkVK:39ZEtUVuCzIytN5srfdNT52kkg

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Readme.js
    1⤵
      PID:4812

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads