Overview

overview

10

Static

static

1

A104.wsf

windows7-x64

10

A104.wsf

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e129d7e093e1ab82b09c0b4d9c23f71ee8c50bff17ac9f9a2bc71fec053fd3e9

  • Size

    16KB

  • Sample

    230503-myfs7aed48

  • MD5

    ad291e12f40e86409a24ede4f6903de7

  • SHA1

    6f917fa806bdba2a2a99cca578e7b5f5f905cb0f

  • SHA256

    e129d7e093e1ab82b09c0b4d9c23f71ee8c50bff17ac9f9a2bc71fec053fd3e9

  • SHA512

    15f9159c2f7841af8cb96c6dbe46f1789ce3e63240ab28c65664ea18452e7a3608acd891e3a2dc287e0d513ae1bda8c9ac90185b80e7dcc3c5e537264d60f945

  • SSDEEP

    384:Now6iaMGvuhcEhxdNKHGWaTnFLmebSpVigfbQ7xqiGb:N51aHuFdN//nFPuVbQ4iG

Score
10/10

Malware Config

Targets

    • Target

      A104.wsf

    • Size

      36KB

    • MD5

      1e0d3efa1494049c07b56db8994f0682

    • SHA1

      9145f291baac4e9542d19177186e338727780f17

    • SHA256

      2f5fa112a3851103950f2aac5c58fe715e2e55277ed1e17edf556d00148dec06

    • SHA512

      7c8437cc58c77777e645c11f110059a17fe437c72143bf24940c6e7497ae00b1fb8537675b584c75bc6972a086a0a8a3f2e2863fbc008f8fefc501bacecb260b

    • SSDEEP

      768:LWp6iDX1ZOWeyrTbojkpRUj7BzU6QxIoohuTtwjA+p:W6W1ZOqb8iRUjFw66f8Zp

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks