Overview

overview

10

Static

static

8

BuhtaClient.vbs

windows7-x64

1

BuhtaClient.vbs

windows10-2004-x64

1

BuhtaClient.exe

windows7-x64

10

BuhtaClient.exe

windows10-2004-x64

10

BuhtaDev.chm

windows7-x64

1

BuhtaDev.chm

windows10-2004-x64

1

BuhtaPivot.xls

windows7-x64

1

BuhtaPivot.xls

windows10-2004-x64

1

BuhtaServer.exe

windows7-x64

1

BuhtaServer.exe

windows10-2004-x64

1

PivotInstall.exe

windows7-x64

1

PivotInstall.exe

windows10-2004-x64

1

dsd.exe

windows7-x64

1

dsd.exe

windows10-2004-x64

1

eapi.dll

windows7-x64

3

eapi.dll

windows10-2004-x64

3

quricol32.dll

windows7-x64

1

quricol32.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    153s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/01/2024, 00:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BuhtaClient.vbs
  • Size 5.7MB
  • Sample240104-aj1tlafee3
  • SHA256 5983718f774db2d1e7842dfe24e7c29dceda82569719c9e74b4227e7ff5904ab
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\BuhtaClient.vbs"
    1⤵
      PID:4824

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads