672f5e60a08b4fc29e1398b289fbbb8d897bbb60513dba4d1e907c94936c776d

Analysis

max time kernel
96s
max time network
94s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
11/06/2023, 11:25

Target

24c172f53a9b74a71e0467d35513d505ba1f000f78b4c98ab22a317fa7c43d7e.vbs
Size

193KB
MD5

3fdae1de5817471f8ff3cfbfc8337368
SHA1

da80e991284573258da8adb3e552cb83288acc02
SHA256

24c172f53a9b74a71e0467d35513d505ba1f000f78b4c98ab22a317fa7c43d7e
SHA512

c798d359a35778c7a8707befdbf7496fb11c7e52c95ed38e83dd60f612cfe86e366821df89d04d37b35acfadf7525dc63800678b26335df00fabc50f7155bcdb
SSDEEP

3072:E2ZGW7iNQ0bLBavnNouS9J0ZbvKx451BSeCsz5mLSjJPjYjgnQas1t+:EWGvuZv49J0ZfgBsz5YSVZUD+

Score

8^/10

Blocklisted process makes network request 2 IoCs

flow	pid	Process
3	1720	WScript.exe
4	1720	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\24c172f53a9b74a71e0467d35513d505ba1f000f78b4c98ab22a317fa7c43d7e.vbs"
1⤵
- Blocklisted process makes network request
PID:1720