a64102ad5032310cb854cd6f68255cbfa61173ef90f88c399ba10a0b15523e18 | Triage

Analysis

max time kernel
28s
max time network
31s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
16-05-2023 11:10

Sharing

Report Analysis Logs

General

Target

ORDER-234468.doc.vbs
Size

193KB
MD5

57ebbe2e997dbfea17030286f8993cb4
SHA1

c5b7745fd561933d84c68b18fff5a131726034cd
SHA256

a64102ad5032310cb854cd6f68255cbfa61173ef90f88c399ba10a0b15523e18
SHA512

7451907e7192da0a09ea9989b4438ad600b760d7af465735a305f20a88c78209000dd1f3bf3b5c99e2e8781dfbf4d75aac9f4ac9897be9c47e6b18e3bf27826d
SSDEEP

384:TxmlmlWimcfU4pbuyerHazSVrxXNX8ZW7/z7X9rlPl0X5mu1uEK9y4VKthVf7JDe:a

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

flow	pid	Process
2	1728	WScript.exe
3	1728	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\ORDER-234468.doc.vbs"
1⤵
- Blocklisted process makes network request
PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads