d81692de8fd3c96833905542934bb5c75fcdd5408c34f1406cca410b5fe6511c | Triage

Analysis

max time kernel
31s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
31-05-2023 08:03

Sharing

Report Analysis Logs

General

Target

ORDER-230531AS.vbs
Size

9KB
MD5

f1d9251929145c7232d1004d6bf309c5
SHA1

f549e8742fe833551d57ef95900fb627921b8049
SHA256

d81692de8fd3c96833905542934bb5c75fcdd5408c34f1406cca410b5fe6511c
SHA512

e36be73daffafc58f790225829f7c3a717f94f8069b340f20175653d7416e2be7eda3cf39fc53c2a9b5c135d4c13aee4c3b6787bd84669c7d3c2a71e8be031cd
SSDEEP

48:0Hd230PPDakG+biHd23gPxBl2akG+biHd23g0BXXakG+bgBP30PPDakG+3p3QxBJ:0Et0R3S6G

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

Processes:

WScript.exe

flow pid process

4 1308 WScript.exe
5 1308 WScript.exe
6 1308 WScript.exe
7 1308 WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\ORDER-230531AS.vbs"
1⤵
- Blocklisted process makes network request
PID:1308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...