Overview

overview

10

Static

static

10

DecryptNovo.exe

windows7-x64

10

DecryptNovo.exe

windows10-2004-x64

10

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/__his...pas.js

windows7-x64

1

Util/__his...pas.js

windows10-2004-x64

1

Util/backu...pas.js

windows7-x64

1

Util/backu...pas.js

windows10-2004-x64

1

Util/backu...pas.js

windows7-x64

1

Util/backu...pas.js

windows10-2004-x64

1

Util/backup/uC.js

windows7-x64

1

Util/backup/uC.js

windows10-2004-x64

1

Util/backup/uLib.js

windows7-x64

1

Util/backup/uLib.js

windows10-2004-x64

3

Util/uLib.js

windows7-x64

1

Util/uLib.js

windows10-2004-x64

1

Analysis

  • max time kernel
    41s
  • max time network
    178s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/03/2023, 11:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Util/__history/uVarC.pas.js

  • Size

    59KB

  • MD5

    d9d863451ac963e7ecac34c63439a6ab

  • SHA1

    6a9ca04d6bf974117f3152c85383caa6875f9f19

  • SHA256

    046ab9c9593ed4dbf581f96e839b7f3dfdfaad96c99e2af26ae210cb0717fb5e

  • SHA512

    c466dffe98e6dcd1079182e042c6b516dfad4d939d0ed92a1be52229e58a21aa5bcec030f16ab53d879b509cd1380435a0adb573e375968b4cd1f7856cd01d82

  • SSDEEP

    384:+g0JT924A0arY2eo7M7K6nplckOYcdJGQ0ZUPRMp1c9kqpAbs+PkHpnH2r0EWW4s:+g09924yZenOS3OlkqwPPWW4hU8WF

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Util\__history\uVarC.pas.js
    1⤵
      PID:1364

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads