Overview

overview

1

Static

static

1

追风动�...p.html

windows7-x64

1

追风动�...p.html

windows10-2004-x64

1

追风动�...ad.htm

windows7-x64

1

追风动�...ad.htm

windows10-2004-x64

1

追风动漫网/ad.js

windows7-x64

1

追风动漫网/ad.js

windows10-2004-x64

1

追风动�...up.vbs

windows7-x64

1

追风动�...up.vbs

windows10-2004-x64

1

追风动�...in.vbs

windows7-x64

1

追风动�...in.vbs

windows10-2004-x64

1

追风动�...ce.vbs

windows7-x64

1

追风动�...ce.vbs

windows10-2004-x64

1

追风动�...or.vbs

windows7-x64

1

追风动�...or.vbs

windows10-2004-x64

1

追风动�...el.vbs

windows7-x64

1

追风动�...el.vbs

windows10-2004-x64

1

追风动�...it.vbs

windows7-x64

1

追风动�...it.vbs

windows10-2004-x64

1

追风动�...ss.vbs

windows7-x64

1

追风动�...ss.vbs

windows10-2004-x64

1

追风动�...te.vbs

windows7-x64

1

追风动�...te.vbs

windows10-2004-x64

1

追风动�...nt.vbs

windows7-x64

1

追风动�...nt.vbs

windows10-2004-x64

1

追风动�...ig.vbs

windows7-x64

1

追风动�...ig.vbs

windows10-2004-x64

1

追风动�...sh.vbs

windows7-x64

1

追风动�...sh.vbs

windows10-2004-x64

1

追风动�...el.vbs

windows7-x64

1

追风动�...el.vbs

windows10-2004-x64

1

追风动�...it.vbs

windows7-x64

1

追风动�...it.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/03/2024, 11:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    追风动漫网/admin_flashdel.vbs

  • Size

    1012B

  • MD5

    4acbc557710579360fe21a94da6b4242

  • SHA1

    855f898367cedff6d0e2857cec414d98881aaef9

  • SHA256

    a70c697ae77388019b952fb40b25ee8985a0f186f630254c03bfe2e51a96b5b5

  • SHA512

    386f21ec0f1f76ad22cc2d1a48b280873017bff67bfedf03423c5fdfa9806e7699cf45cc476e40025f96057990c8fd2bcbe19b035d8df1b03030ae8f32daffbe

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\追风动漫网\admin_flashdel.vbs"
    1⤵
      PID:5048
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3724 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:4944

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads