6105732bdeec2f7e1b00567266f9865a820efa4511d512f5e1ddc89eddcc691c | Triage

Analysis

max time kernel
30s
max time network
35s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
23/03/2023, 04:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

IMG20039000SDh.wsf
Size

922B
MD5

db942b4dcc3ebac9d46efbb84d9f32b1
SHA1

588802e0715b3d0bec5fe07079910467f82cb854
SHA256

b9fd276595707bb6037dfe2b37ff578327b0f12c577e7b733ef4b9c884fe93a6
SHA512

f7ad37103e5134a2b1c3b5b71f2fe4bc6db554e8440e2faeb29615cad8779ef5241758a96c992308c4701282309cd951ba30c4ff2148711d11f9951a8b137976

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\IMG20039000SDh.wsf"
1⤵
PID:2024

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads