3ea7d9d931eebd3542a7a54f7f93254ca897a44398cef1b19bf491ce4a0f14b0

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
17-04-2024 01:18

Target

3ea7d9d931eebd3542a7a54f7f93254ca897a44398cef1b19bf491ce4a0f14b0.vbs
Size

399KB
MD5

4287a9d914a236cba3e11341562bc9a9
SHA1

fb01432aec2e310769aab7e34df7cb9215d1ad95
SHA256

3ea7d9d931eebd3542a7a54f7f93254ca897a44398cef1b19bf491ce4a0f14b0
SHA512

467a2321dc6827e9d6c7f6c490d666198a14158a6aedda7e04c8342f44529b95cb3ef4debf5de83f7e9797336f8acba0dbd66296bea000d27149baaaf9d0c0db
SSDEEP

3072:HHGRPQMYFEhNe4VTdRnTT8w4TWXZq2vgHdpe+og0S76QzS18f8d6bb/g52r:+PQMYFYZqV

Score

8^/10

Blocklisted process makes network request 2 IoCs

flow	pid	Process
4	1888	WScript.exe
7	1888	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\3ea7d9d931eebd3542a7a54f7f93254ca897a44398cef1b19bf491ce4a0f14b0.vbs"
1⤵
- Blocklisted process makes network request
PID:1888