Overview

overview

3

Static

static

1

SZ企业�...ut.asp

windows7-x64

3

SZ企业�...ut.asp

windows10-2004-x64

3

SZ企业�...ob.asp

windows7-x64

3

SZ企业�...ob.asp

windows10-2004-x64

3

SZ企业�...il.vbs

windows7-x64

1

SZ企业�...il.vbs

windows10-2004-x64

1

SZ企业�...ow.vbs

windows7-x64

1

SZ企业�...ow.vbs

windows10-2004-x64

1

SZ企业�...eg.vbs

windows7-x64

1

SZ企业�...eg.vbs

windows10-2004-x64

1

SZ企业�...il.vbs

windows7-x64

1

SZ企业�...il.vbs

windows10-2004-x64

1

SZ企业�...ar.asp

windows7-x64

3

SZ企业�...ar.asp

windows10-2004-x64

3

SZ企业�...nn.vbs

windows7-x64

1

SZ企业�...nn.vbs

windows10-2004-x64

1

SZ企业�...db.vbs

windows7-x64

1

SZ企业�...db.vbs

windows10-2004-x64

1

SZ企业�...bb.vbs

windows7-x64

1

SZ企业�...bb.vbs

windows10-2004-x64

1

SZ企业�...ct.asp

windows7-x64

3

SZ企业�...ct.asp

windows10-2004-x64

3

SZ企业�...re.asp

windows7-x64

3

SZ企业�...re.asp

windows10-2004-x64

3

SZ企业�...lt.vbs

windows7-x64

1

SZ企业�...lt.vbs

windows10-2004-x64

1

SZ企业�...il.vbs

windows7-x64

1

SZ企业�...il.vbs

windows10-2004-x64

1

SZ企业�...hop.js

windows7-x64

1

SZ企业�...hop.js

windows10-2004-x64

1

SZ企业�...op.asp

windows7-x64

3

SZ企业�...op.asp

windows10-2004-x64

3

Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/03/2024, 11:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SZ企业快速建站系统/default.vbs

  • Size

    9KB

  • MD5

    baf8fdcd47fbb5a241eaa53462621702

  • SHA1

    0c1d64ad7f0f996a6f45a315a1a97942239fd9b2

  • SHA256

    be358772888f6b1f7dbed91da84e3d3aa7155c8a6c7f8a01f72ba8d2ff298481

  • SHA512

    09c4668fb6f78970774a12b273ee1156f4824b76a00bd183b0ebb10c5a14f81a349fa47fd84426e68d4c4ddb650a90bc91e057b554d59e865b6e0d8e11c918e6

  • SSDEEP

    192:X+dAnBthDgR5ftG0XikCPGZCs7NaSyCIT7MUDz:X+dSXhDQ5FG0SHPGZC6Tq/Dz

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\SZ企业快速建站系统\default.vbs"
    1⤵
      PID:3780
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3752 --field-trial-handle=2304,i,6987730730348465820,3913273227385401271,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:2172

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads