Overview
overview
1Static
static
1bas/modHelpSystem.vbs
windows7-x64
1bas/modHelpSystem.vbs
windows10-2004-x64
1bas/modPublic.vbs
windows7-x64
1bas/modPublic.vbs
windows10-2004-x64
1cls/CSysInfo.vbs
windows7-x64
1cls/CSysInfo.vbs
windows10-2004-x64
1cls/clsBot...ds.vbs
windows7-x64
1cls/clsBot...ds.vbs
windows10-2004-x64
1cls/clsInfect.vbs
windows7-x64
1cls/clsInfect.vbs
windows10-2004-x64
1cls/clsNetInfo.vbs
windows7-x64
1cls/clsNetInfo.vbs
windows10-2004-x64
1cls/clsSoc...ol.vbs
windows7-x64
1cls/clsSoc...ol.vbs
windows10-2004-x64
1frm/frmMain.vbs
windows7-x64
1frm/frmMain.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
bas/modHelpSystem.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bas/modHelpSystem.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
bas/modPublic.vbs
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
bas/modPublic.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
cls/CSysInfo.vbs
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
cls/CSysInfo.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
cls/clsBotCommands.vbs
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
cls/clsBotCommands.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
cls/clsInfect.vbs
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
cls/clsInfect.vbs
Resource
win10v2004-20230221-en
Behavioral task
behavioral11
Sample
cls/clsNetInfo.vbs
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
cls/clsNetInfo.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
cls/clsSocketControl.vbs
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
cls/clsSocketControl.vbs
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
frm/frmMain.vbs
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
frm/frmMain.vbs
Resource
win10v2004-20230220-en
General
-
Target
vbbot.zip
-
Size
25KB
-
MD5
a3d68eeff0dc4ee2c58a090c49464685
-
SHA1
dd0a4d0af9fe394ba89e7d87176099669a03aa93
-
SHA256
76f89ab405b18010a6d71fa8af3487a1bb2911741a25bd7a359d61f456130303
-
SHA512
4ab313cb75ae45d484bef2646b7fff57d5ac8704ab72c8692cf1c359762f4f1a0e119f564078756d96468b5b401fd9fb672ed61acfa122beb74867a8fdf43ffa
-
SSDEEP
384:ZcjxzaU37daU4XE4gX/U2wTsBgAvhS8BBeUsHDaqqkbetDRaZLpTH+XUy42tfr/e:ZataU6w/j/pS6eUsHQaPH+kyvhr/e
Malware Config
Signatures
Files
-
vbbot.zip.zip
Password: infected
-
LSASS.vbp
-
bas/modHelpSystem.bas.vbs
-
bas/modLoadClass.bas
-
bas/modPublic.bas.vbs
-
cls/CSysInfo.cls.vbs
-
cls/clsBotCommands.cls.vbs
-
cls/clsBotSettings.cls
-
cls/clsInfect.cls.vbs
-
cls/clsKillProcess.cls
-
cls/clsNetInfo.cls.vbs
-
cls/clsSocketControl.cls.vbs
-
etc/dos.ico
-
frm/frmMain.frm.vbs
-
frm/frmMain.log