5a6374adb1371c63cace395445818f4b83dcdd2494da86062b0ab3cbfb201e0b | Triage

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
04-06-2023 14:05

Sharing

Report Analysis Logs

General

Target

rORDER-023603_List.xls.vbs
Size

9KB
MD5

b66938f8b8ab81aef4aceeea87bbe7b5
SHA1

2f140f44c2f74ecff2e24dcb0b3fbd72080e090a
SHA256

5a6374adb1371c63cace395445818f4b83dcdd2494da86062b0ab3cbfb201e0b
SHA512

0f449d44022e9abec453180dae1f25e06fb538359c6cc52f3eb6efafb9b339f293f733284c73ac2b793fac97aee92df01eeed524c361ac0f7c35664a97dfd0bc
SSDEEP

48:bnlrCVFFIlV2rVboysaqbwYHppKZ2I0wiin5I2c1YleGE/+:jlrCnFSmzs/3IKin5I2c1Yle9m

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

flow	pid	Process
4	2028	WScript.exe
5	2028	WScript.exe
6	2028	WScript.exe
7	2028	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\rORDER-023603_List.xls.vbs"
1⤵
- Blocklisted process makes network request
PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads