Overview

overview

10

Static

static

10

DecryptNovo.exe

windows7-x64

10

DecryptNovo.exe

windows10-2004-x64

10

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/backu...pas.js

windows7-x64

1

Util/backu...pas.js

windows10-2004-x64

1

Util/backu...pas.js

windows7-x64

1

Util/backu...pas.js

windows10-2004-x64

1

Util/backup/uC.js

windows7-x64

1

Util/backup/uC.js

windows10-2004-x64

1

Util/backup/uLib.js

windows7-x64

1

Util/backup/uLib.js

windows10-2004-x64

3

Util/uLib.js

windows7-x64

1

Util/uLib.js

windows10-2004-x64

1

Analysis

  • max time kernel
    35s
  • max time network
    186s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-03-2023 11:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Util/__history/uVarC.pas.js

  • Size

    56KB

  • MD5

    dc98baea28755ee3421c0ab03b888500

  • SHA1

    940ad74e5e6a5f40b7206ee6ce8978071f32c656

  • SHA256

    ab6c09335da6beb5bc24f152d15be93b258f6fecd3fe44514edc2323a227020a

  • SHA512

    6cbe79767a65d8d06836b8cdf43b18972a6169354aeee72c669af0c7cc4e84b5ab4c1945873ad6e81e84dd22391b80a3db693129e03b1a8765ebb2e3e4bcb976

  • SSDEEP

    384:jg0JT924A0arY2eo7M7K6nplckKIcdJGQ0ZUPiMp1c0kqpAbs+PkHpnH2r0EWZLM:jg09924yZenKC3OxkqwPPWZLeF8IF

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Util\__history\uVarC.pas.js
    1⤵
      PID:3692

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads