Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
19-01-2024 13:09
General
-
Target
one/Main.vbs
-
Size
5KB
-
MD5
d8931de6f3ad4f37ba6e988244aead19
-
SHA1
0b8d098d19c928bc07114365c691b6b04c2bfb6e
-
SHA256
7585745a2c4a6a7d25b0cd39a8aef36076f2eb225d5690b7f892fa4b6c9c24d6
-
SHA512
cfbd1556ac7a07991a7c63fd9a6af423c2372528e12bff4ab480b72d37ea9968c3c7b96abaa42d1fc73998989a88b08a13c8b0f2a3d8a6dafa6a462d05b208a8
-
SSDEEP
96:IKwxPLXLTLnBdmVmmk0t9/mkCCCUBG+hf+lZt9Hncb3mJueWEaWIgRBBx7:IK0P7PTHrmlttmLCD4+hf+lZt5cj3EtJ
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\one\Main.vbs"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB