Overview

overview

1

Static

static

1

Plugins/icmp.js

windows7-x64

1

Plugins/icmp.js

windows10-2004-x64

1

Plugins/ms...exp.js

windows7-x64

1

Plugins/ms...exp.js

windows10-2004-x64

1

Plugins/rdp.js

windows7-x64

1

Plugins/rdp.js

windows10-2004-x64

1

Plugins/scanner.js

windows7-x64

1

Plugins/scanner.js

windows10-2004-x64

1

WebScan/info/rules.js

windows7-x64

1

WebScan/info/rules.js

windows10-2004-x64

1

WebScan/lib/check.js

windows7-x64

1

WebScan/lib/check.js

windows10-2004-x64

1

WebScan/lib/eval.js

windows7-x64

1

WebScan/lib/eval.js

windows10-2004-x64

1

WebScan/li....pb.js

windows7-x64

1

WebScan/li....pb.js

windows10-2004-x64

1

WebScan/po...-1.vbs

windows7-x64

1

WebScan/po...-1.vbs

windows10-2004-x64

1

WebScan/po...-2.vbs

windows7-x64

1

WebScan/po...-2.vbs

windows10-2004-x64

1

WebScan/po...47.vbs

windows7-x64

1

WebScan/po...47.vbs

windows10-2004-x64

1

WebScan/po...88.vbs

windows7-x64

1

WebScan/po...88.vbs

windows10-2004-x64

1

WebScan/po...ss.vbs

windows7-x64

1

WebScan/po...ss.vbs

windows10-2004-x64

1

WebScan/po...ce.vbs

windows7-x64

1

WebScan/po...ce.vbs

windows10-2004-x64

1

WebScan/po...ce.vbs

windows7-x64

1

WebScan/po...ce.vbs

windows10-2004-x64

1

WebScan/po...ce.vbs

windows7-x64

1

WebScan/po...ce.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    03/09/2023, 04:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    WebScan/pocs/alibaba-nacos-v1-auth-bypass.vbs

  • Size

    860B

  • MD5

    1f8e08f2357ecdd6d5a5006a234d5b3b

  • SHA1

    7f084c825d5a44a46abefb4e7ee4b943cddb7578

  • SHA256

    8885b55a5e90188a34a4295f8f338d96d2e3b2d732fc3a42994d2487de2ec5e9

  • SHA512

    d0c19f1137455add65359968f7165c8c13c311911822fa08d67614e9aa92058072d43a6e2527a3e7c82c1ea0255787cdce1a092891fa9338b3e9a646b40c85a6

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\WebScan\pocs\alibaba-nacos-v1-auth-bypass.vbs"
    1⤵
      PID:2576

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads