Overview

overview

1

Static

static

1

全新安�...ad.vbs

windows7-x64

1

全新安�...ad.vbs

windows10-2004-x64

1

全新安�...up.vbs

windows7-x64

1

全新安�...up.vbs

windows10-2004-x64

1

全新安�...in.vbs

windows7-x64

1

全新安�...in.vbs

windows10-2004-x64

1

全新安�...ad.vbs

windows7-x64

1

全新安�...ad.vbs

windows10-2004-x64

1

全新安�...rd.vbs

windows7-x64

1

全新安�...rd.vbs

windows10-2004-x64

1

全新安�...se.vbs

windows7-x64

1

全新安�...se.vbs

windows10-2004-x64

全新安�...on.vbs

windows7-x64

1

全新安�...on.vbs

windows10-2004-x64

1

全新安�...fo.vbs

windows7-x64

1

全新安�...fo.vbs

windows10-2004-x64

1

全新安�...st.vbs

windows7-x64

1

全新安�...st.vbs

windows10-2004-x64

1

全新安�...ass.js

windows7-x64

1

全新安�...ass.js

windows10-2004-x64

1

全新安�...ct.vbs

windows7-x64

1

全新安�...ct.vbs

windows10-2004-x64

1

全新安�...ld.vbs

windows7-x64

1

全新安�...ld.vbs

windows10-2004-x64

1

全新安�...ml.vbs

windows7-x64

1

全新安�...ml.vbs

windows10-2004-x64

1

全新安�...rt.vbs

windows7-x64

1

全新安�...rt.vbs

windows10-2004-x64

1

全新安�...op.vbs

windows7-x64

1

全新安�...op.vbs

windows10-2004-x64

1

全新安�...ew.vbs

windows7-x64

1

全新安�...ew.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    92s
  • max time network
    115s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/02/2024, 14:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    全新安装/admin/aspmps.info.blacklist.vbs

  • Size

    10KB

  • MD5

    4ecb014799b3f25541cd3ff2203b46a6

  • SHA1

    4181bab62ed43f6da21b4f285c064a156634bbbf

  • SHA256

    0c1a984c77c34de3be9b84051dc120daf7bca3f57f431ee7eff7815f957266eb

  • SHA512

    b2b0240680353df2db6483a26f8368d1a91170e3e6b0e635c5b9292fa8561abc057aa3d0322a5c8889373917cd92905b4e677e7bccabb7c829b406f984d4cf1a

  • SSDEEP

    192:YMzuFULQF9KpP6QmIcNJQBqm2Q2O1WvR7WIqnrxSSXtfMWQKtGbz3MZHMbbM8bMm:YMzuFULu9KpPtmIcNhnzO1aR7DyrxbXW

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\全新安装\admin\aspmps.info.blacklist.vbs"
    1⤵
      PID:840

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads