Overview

overview

7

Static

static

7

CCC/aspRwW...il.vbs

windows7-x64

1

CCC/aspRwW...il.vbs

windows10-2004-x64

1

CCC/aspSpy.vbs

windows7-x64

1

CCC/aspSpy.vbs

windows10-2004-x64

1

CCC/aspx.js

windows7-x64

1

CCC/aspx.js

windows10-2004-x64

1

CCC/phpSpy.js

windows7-x64

1

CCC/phpSpy.js

windows10-2004-x64

1

Customize/...ze.vbs

windows7-x64

1

Customize/...ze.vbs

windows10-2004-x64

1

caidao.exe

windows7-x64

7

caidao.exe

windows10-2004-x64

7

readme.vbs

windows7-x64

1

readme.vbs

windows10-2004-x64

1

CCC/aspRwW...il.vbs

windows7-x64

1

CCC/aspRwW...il.vbs

windows10-2004-x64

1

CCC/aspSpy.vbs

windows7-x64

1

CCC/aspSpy.vbs

windows10-2004-x64

1

CCC/aspx.js

windows7-x64

1

CCC/aspx.js

windows10-2004-x64

1

CCC/phpSpy.js

windows7-x64

1

CCC/phpSpy.js

windows10-2004-x64

1

Customize/...ze.vbs

windows7-x64

1

Customize/...ze.vbs

windows10-2004-x64

1

caidao.exe

windows7-x64

7

caidao.exe

windows10-2004-x64

7

readme.vbs

windows7-x64

1

readme.vbs

windows10-2004-x64

1

caidao-201...il.vbs

windows7-x64

1

caidao-201...il.vbs

windows10-2004-x64

1

caidao-201...py.vbs

windows7-x64

1

caidao-201...py.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    138s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/04/2024, 19:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    readme.vbs

  • Size

    9KB

  • MD5

    48fd1df75dd446ed35072870695ea40e

  • SHA1

    353da8af716739aba66f0b5ba0cf373c4a27dece

  • SHA256

    a9be3d26b84f9f8e8191682d38eca143e41de4a3aee1194e6fc81cf7fa9835a8

  • SHA512

    83248a954249b1d50bbba718a0530aa47efa68de07581ff5d710c54b1012969422c6414d7e24bccab1fcf48899af76cc5d358ece439b8aa6a907da7f03d10fa4

  • SSDEEP

    192:OsAGume8kuhW1HBQnJEw5az0ztczVFA8fJej1n1ZPKGzU7Sw7U9C8+x0lc:OsAGume8kcCBQnJtaz0ZczVJejnZPKz5

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\readme.vbs"
    1⤵
      PID:332
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4012 --field-trial-handle=2276,i,11674642242468042059,14711253743544118298,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:4032

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads