Analysis
-
max time kernel
94s -
max time network
116s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
23-02-2024 14:47
General
-
Target
Payment_Advice00000000122876543.vbs
-
Size
1KB
-
MD5
c8f7d68cf57960514474ba5ad066dca9
-
SHA1
6863844c1faf768e1e420ffd62fa644a5abe84ba
-
SHA256
b3298c1becc91380b9273146d91ab034b4792e98bf26a7a61e99b481bdf3f4fa
-
SHA512
15fdf858c0155326603ed7a7f18150203d8212e560fffebc9eca03f46a16c0c8e14ab9382c3a0c35d265ab19cbff670b6b148a9e8b47c84bab7fc07a539a261c
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 1 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Payment_Advice00000000122876543.vbs"1⤵
- Blocklisted process makes network request