Overview

overview

3

Static

static

1

Connections/wxbbs.vbs

windows7-x64

1

Connections/wxbbs.vbs

windows10-2004-x64

1

admin.asp

windows7-x64

3

admin.asp

windows10-2004-x64

3

askly.asp

windows7-x64

3

askly.asp

windows10-2004-x64

3

checkcode.vbs

windows7-x64

1

checkcode.vbs

windows10-2004-x64

1

default.asp

windows7-x64

3

default.asp

windows10-2004-x64

3

delly.asp

windows7-x64

3

delly.asp

windows10-2004-x64

3

face.htm

windows7-x64

1

face.htm

windows10-2004-x64

1

images/krId.js

windows7-x64

1

images/krId.js

windows10-2004-x64

1

lybook.asp

windows7-x64

3

lybook.asp

windows10-2004-x64

3

pass.asp

windows7-x64

3

pass.asp

windows10-2004-x64

3

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Connections/wxbbs.vbs

windows7-x64

1

Connections/wxbbs.vbs

windows10-2004-x64

1

admin.asp

windows7-x64

3

admin.asp

windows10-2004-x64

3

askly.asp

windows7-x64

3

askly.asp

windows10-2004-x64

3

checkcode.vbs

windows7-x64

1

checkcode.vbs

windows10-2004-x64

1

default.asp

windows7-x64

3

default.asp

windows10-2004-x64

3

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    14-03-2024 12:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    images/krId.js

  • Size

    4KB

  • MD5

    e7dcd7e69171ea057c419115fd087dae

  • SHA1

    60332c4c9013a86deb1df33183d798cf2e05cafc

  • SHA256

    7053e490c36fd5bd029d38a0b73094e7e0b7ef15d675fad32ccfba0186059eef

  • SHA512

    735183e2a1b712d7ad6eed37291d7bbff003430a3fbbd40fb8788caa64339cfd19c74e0093a830eeb60139d0c730041f672b30104ecac8629baf2d5a6b9c8a95

  • SSDEEP

    48:6zOpCx8405DopgSSuGpUnZgQ4RGM7u17igj1iXHiXI1igD:6zOpCxORopVSuGwR3iC1iXHiXI1iO

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\images\krId.js
    1⤵
      PID:1856

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads