Overview

overview

3

Static

static

1

SZ企业�...ut.asp

windows7-x64

3

SZ企业�...ut.asp

windows10-2004-x64

3

SZ企业�...ob.asp

windows7-x64

3

SZ企业�...ob.asp

windows10-2004-x64

3

SZ企业�...il.vbs

windows7-x64

1

SZ企业�...il.vbs

windows10-2004-x64

1

SZ企业�...ow.vbs

windows7-x64

1

SZ企业�...ow.vbs

windows10-2004-x64

1

SZ企业�...eg.vbs

windows7-x64

1

SZ企业�...eg.vbs

windows10-2004-x64

1

SZ企业�...il.vbs

windows7-x64

1

SZ企业�...il.vbs

windows10-2004-x64

1

SZ企业�...ar.asp

windows7-x64

3

SZ企业�...ar.asp

windows10-2004-x64

3

SZ企业�...nn.vbs

windows7-x64

1

SZ企业�...nn.vbs

windows10-2004-x64

1

SZ企业�...db.vbs

windows7-x64

1

SZ企业�...db.vbs

windows10-2004-x64

1

SZ企业�...bb.vbs

windows7-x64

1

SZ企业�...bb.vbs

windows10-2004-x64

1

SZ企业�...ct.asp

windows7-x64

3

SZ企业�...ct.asp

windows10-2004-x64

3

SZ企业�...re.asp

windows7-x64

3

SZ企业�...re.asp

windows10-2004-x64

3

SZ企业�...lt.vbs

windows7-x64

1

SZ企业�...lt.vbs

windows10-2004-x64

1

SZ企业�...il.vbs

windows7-x64

1

SZ企业�...il.vbs

windows10-2004-x64

1

SZ企业�...hop.js

windows7-x64

1

SZ企业�...hop.js

windows10-2004-x64

1

SZ企业�...op.asp

windows7-x64

3

SZ企业�...op.asp

windows10-2004-x64

3

Analysis

  • max time kernel
    155s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/03/2024, 11:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SZ企业快速建站系统/chkemail.vbs

  • Size

    1KB

  • MD5

    96e8a955e551ade679e0d8cf16ebb445

  • SHA1

    1fb681b8320f559999f1283ee962eec3ae52052b

  • SHA256

    b1b05d7af82ed012287c5e56e3ab24c7000ba35ee21bf33c77d0ba63a87e9800

  • SHA512

    a4da9140803d702ba3f7688bafc35764099930c6c9767b14cca70815762da08fe253f52402b89ea07767d58f65b078a08f655c1529ffd24fa912f8218cfb59cb

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\SZ企业快速建站系统\chkemail.vbs"
    1⤵
      PID:5020
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4092 --field-trial-handle=2280,i,716736634476467098,11449718822158202904,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:1964

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads