Overview

overview

10

Static

static

1

malware.wsf

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    malware.wsf

  • Size

    82KB

  • Sample

    230525-h4f9pagf46

  • MD5

    bd93fa16abb91631333448f913bda71b

  • SHA1

    f4852466f45d9e142835eaab2764993d492291fe

  • SHA256

    cf7bb2a194854f087eafcd7e6257b23c9674dde746bde7b42a3de2afbbfacaf7

  • SHA512

    35a96012f1cacaf617c70c34532bc238117b6c897dfff89bdb89fa9cfec0a21552a23f97d6c7c99aab3271f96fcbd05b85927333cc0bac0a098e71826b6488c1

  • SSDEEP

    1536:sVbk9lDdQej+r+iOzN16gG3NlDN3NlDdQI/CKkjm0BhiP2mH9kCucZ3DbzwpCF9q:2bClDuoO+ioNFG3NlDN3NlDuI6Ky2nbs

Score
10/10

Malware Config

Targets

    • Target

      malware.wsf

    • Size

      82KB

    • MD5

      bd93fa16abb91631333448f913bda71b

    • SHA1

      f4852466f45d9e142835eaab2764993d492291fe

    • SHA256

      cf7bb2a194854f087eafcd7e6257b23c9674dde746bde7b42a3de2afbbfacaf7

    • SHA512

      35a96012f1cacaf617c70c34532bc238117b6c897dfff89bdb89fa9cfec0a21552a23f97d6c7c99aab3271f96fcbd05b85927333cc0bac0a098e71826b6488c1

    • SSDEEP

      1536:sVbk9lDdQej+r+iOzN16gG3NlDN3NlDdQI/CKkjm0BhiP2mH9kCucZ3DbzwpCF9q:2bClDuoO+ioNFG3NlDN3NlDuI6Ky2nbs

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1

MITRE ATT&CK Matrix

Tasks