4c3bfe0110373c35a21c09c75df33107ef42dcd1a5a32746e3392971d4a40cc3 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

7b857c19b6...2d.exe

windows7-x64

3

7b857c19b6...2d.exe

windows10-2004-x64

3

$SYSDIR/Na...er.scr

windows7-x64

1

$SYSDIR/Na...er.scr

windows10-2004-x64

1

$TEMP/dospop.exe

windows7-x64

7

$TEMP/dospop.exe

windows10-2004-x64

7

tbu03852/dospop.dll

windows7-x64

6

tbu03852/dospop.dll

windows10-2004-x64

6

tbu03852/options.html

windows7-x64

1

tbu03852/options.html

windows10-2004-x64

1

tbu03852/s...g.html

windows7-x64

1

tbu03852/s...g.html

windows10-2004-x64

1

tbu03852/s...b.html

windows7-x64

1

tbu03852/s...b.html

windows10-2004-x64

1

tbu03852/tbhelper.dll

windows7-x64

1

tbu03852/tbhelper.dll

windows10-2004-x64

1

tbu03852/t...091.js

windows7-x64

1

tbu03852/t...091.js

windows10-2004-x64

1

tbu03852/u...ll.exe

windows7-x64

1

tbu03852/u...ll.exe

windows10-2004-x64

1

tbu03852/update.exe

windows7-x64

1

tbu03852/update.exe

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

Analysis

max time kernel
146s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
27-01-2024 23:04

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

7b857c19b65383476a2450b99f6d6e2d.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

7b857c19b65383476a2450b99f6d6e2d.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

$SYSDIR/Natasha_bedingfield_Screensaver.scr

Resource

win7-20231215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

$SYSDIR/Natasha_bedingfield_Screensaver.scr

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

$TEMP/dospop.exe

Resource

win7-20231215-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral6

Sample

$TEMP/dospop.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

tbu03852/dospop.dll

Resource

win7-20231129-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

tbu03852/dospop.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

tbu03852/options.html

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

tbu03852/options.html

Resource

win10v2004-20231222-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

tbu03852/static_img.html

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

tbu03852/static_img.html

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

tbu03852/static_pub.html

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

tbu03852/static_pub.html

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

tbu03852/tbhelper.dll

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

tbu03852/tbhelper.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

tbu03852/tbs_include_script_008091.js

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

tbu03852/tbs_include_script_008091.js

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

tbu03852/uninstall.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

tbu03852/uninstall.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

tbu03852/update.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

tbu03852/update.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Uninstall.exe

Resource

win7-20231215-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

Uninstall.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

tbu03852/tbs_include_script_008091.js
Size

2KB
MD5

b734be75b8963660abfa7412095c7a82
SHA1

6091ffb358b2596d53f4e74e09da01326258dce8
SHA256

078d1eadf0733de055e1ca4ff03bdab7203a66823e9cb4d5a8539d84276759a5
SHA512

1bd848ab95724bf8b7c6dc2e91a066a85c0d6239c16c3e548cfaa7a6e57c62e432b820b7503e998bc205d9153ec28c7e590610b8f4481e28b2ef6df35f14cf68

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tbu03852\tbs_include_script_008091.js
1⤵
PID:3880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy