c6ffe2653e2a4c3b4aaabae7700ab09a83591e2a2df884ad7beede92dda4080b | Triage

Analysis

max time kernel
121s
max time network
142s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
16-10-2023 15:48

Sharing

Report Analysis Logs

General

Target

Payment_Copy.docx.vbs
Size

8KB
MD5

dc81bc3a9413ca5f8b6a0ad6bef2f271
SHA1

d815331071d10edaf3e17aca21138de366a33c2a
SHA256

c6ffe2653e2a4c3b4aaabae7700ab09a83591e2a2df884ad7beede92dda4080b
SHA512

734567a4fbac86783699f8de0056f289e43cd8ef7114bb6443f05a2603abfda16fdcdc12b4d6c18cd4de7d993aae5ae20d9917337e9b2202b9315b170ae6b507
SSDEEP

192:florgiorNohgUcigdOhgyC+lseKlwUGUiHijHifHiDLHiDAut:dQ+ygAgSgXBhHGaDOMA

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

flow	pid	Process
4	2776	WScript.exe
6	2776	WScript.exe
7	2776	WScript.exe
8	2776	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Payment_Copy.docx.vbs"
1⤵
- Blocklisted process makes network request
PID:2776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads