Overview

overview

3

Static

static

1

第九互�...bar.js

windows7-x64

1

第九互�...bar.js

windows10-2004-x64

1

第九互�..._ad.js

windows7-x64

1

第九互�..._ad.js

windows10-2004-x64

1

第九互�...ext.js

windows7-x64

1

第九互�...ext.js

windows10-2004-x64

1

第九互�...st.asp

windows7-x64

3

第九互�...st.asp

windows10-2004-x64

3

第九互�...ex.asp

windows7-x64

3

第九互�...ex.asp

windows10-2004-x64

3

Burai Figh...US).gb

windows7-x64

3

Burai Figh...US).gb

windows10-2004-x64

3

GB1263.gb

windows7-x64

3

GB1263.gb

windows10-2004-x64

3

Contra (J).gb

windows7-x64

3

Contra (J).gb

windows10-2004-x64

3

GB1283.gb

windows7-x64

3

GB1283.gb

windows10-2004-x64

3

GB0019.gb

windows7-x64

3

GB0019.gb

windows10-2004-x64

3

GB0029.gb

windows7-x64

3

GB0029.gb

windows10-2004-x64

3

第九互�...ex.vbs

windows7-x64

1

第九互�...ex.vbs

windows10-2004-x64

1

第九互�...ll.vbs

windows7-x64

1

第九互�...ll.vbs

windows10-2004-x64

1

第九互�...AG.vbs

windows7-x64

1

第九互�...AG.vbs

windows10-2004-x64

1

第九互�...AY.vbs

windows7-x64

1

第九互�...AY.vbs

windows10-2004-x64

1

第九互�...Ad.vbs

windows7-x64

1

第九互�...Ad.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    130s
  • max time network
    187s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/03/2024, 01:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    第九互动 2005 v1.0 Build 0827/SHOP_PAY.vbs

  • Size

    9KB

  • MD5

    cbdb221e3db606bcf7a882f5ef7a34df

  • SHA1

    ea8c15c25bab99b14c253f7df397c8966f0e5e25

  • SHA256

    76d4188dee7d9f151b4e7b58f3adeb72cb22b465ce6a66112cb41dd1b7692978

  • SHA512

    61f0fb4dc239f8a3d76b52ada09905349c0da151d7ce9c6b73d3dbb341a0f6129e418d2d5e8082b1cfb6fa5ba8f2a3e6e1a88bcf97f6ae0346aa5d33fc9579f3

  • SSDEEP

    192:MWB6Bb6CkvnjV63Ak6h+qT7og5QxjytBxSLxv0SY:MGqb6VvnM3Not0W

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\第九互动 2005 v1.0 Build 0827\SHOP_PAY.vbs"
    1⤵
      PID:2336
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4252 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:3596

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads