47dd3b96d620554569a957c1571b202f224a6ba2432cee71530613e1743fc0ac | Triage

Analysis

max time kernel
54s
max time network
186s
platform
windows10-1703_x64
resource
win10-20220812-es
resource tags

arch:x64arch:x86image:win10-20220812-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
04/01/2023, 13:57

Sharing

Report Analysis Logs

General

Target

SpotX-Win-main/scripts/cache/hide_window.vbs
Size

140B
MD5

ed0a06e0e24e1f94e608bca03eb5eef2
SHA1

f079d2a3d6b0ef0657e6dfeb8c278ec5bfc1ca20
SHA256

1a817aa66979c8100608692bc29722fc97e1955460614a7263fe24e1ecdb71b2
SHA512

cf78e0053c240541e02cbccd51f5414cd0ba2e884c7c0693fface365ebc46e382b1eef3a4f74f53c983a3055252cd7273f95159e959bfa6b0e64bb5e5dba187c

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\SpotX-Win-main\scripts\cache\hide_window.vbs"
1⤵
PID:4404

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads