Overview

overview

10

Static

static

8

BuhtaClient.vbs

windows7-x64

1

BuhtaClient.vbs

windows10-2004-x64

1

BuhtaClient.exe

windows7-x64

10

BuhtaClient.exe

windows10-2004-x64

10

BuhtaDev.chm

windows7-x64

1

BuhtaDev.chm

windows10-2004-x64

1

BuhtaPivot.xls

windows7-x64

1

BuhtaPivot.xls

windows10-2004-x64

1

BuhtaServer.exe

windows7-x64

1

BuhtaServer.exe

windows10-2004-x64

1

PivotInstall.exe

windows7-x64

1

PivotInstall.exe

windows10-2004-x64

1

dsd.exe

windows7-x64

1

dsd.exe

windows10-2004-x64

1

eapi.dll

windows7-x64

3

eapi.dll

windows10-2004-x64

3

quricol32.dll

windows7-x64

1

quricol32.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04-01-2024 00:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    BuhtaClient.vbs

  • Size

    5.7MB

  • MD5

    478fe388cc5749c07fc2f21dbabe25c0

  • SHA1

    e0acd04d2f7f88b47bd82abb7819d1b273eaa4e7

  • SHA256

    5983718f774db2d1e7842dfe24e7c29dceda82569719c9e74b4227e7ff5904ab

  • SHA512

    fb3ef8591b036f42e4346ff39287867e972bbe88005529f3ffa112d2b972c7f0c48ad5179078514e700823711041b2e7f9c57960d55961d6dd1ee4d39fc8710c

  • SSDEEP

    98304:noQSO6ZRVtW4tiyR/Mx2pkujlme8n1cOnJO:m

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\BuhtaClient.vbs"
    1⤵
      PID:2356

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads