Overview

overview

8

Static

static

7

office2019...us.exe

windows7-x64

1

office2019...us.exe

windows10-2004-x64

1

office2019...za.dll

windows7-x64

3

office2019...za.dll

windows10-2004-x64

3

office2019...za.exe

windows7-x64

1

office2019...za.exe

windows10-2004-x64

1

office2019...xa.dll

windows7-x64

3

office2019...xa.dll

windows10-2004-x64

3

office2019...rm.exe

windows7-x64

7

office2019...rm.exe

windows10-2004-x64

7

office2019...2c.exe

windows7-x64

1

office2019...2c.exe

windows10-2004-x64

1

office2019...71.dll

windows7-x64

1

office2019...71.dll

windows10-2004-x64

1

office2019...id.dll

windows7-x64

1

office2019...id.dll

windows10-2004-x64

1

office2019...ne.dll

windows7-x64

7

office2019...ne.dll

windows10-2004-x64

7

office2019...71.dll

windows7-x64

3

office2019...71.dll

windows10-2004-x64

3

office2019...71.dll

windows7-x64

3

office2019...71.dll

windows10-2004-x64

3

office2019...dl.dll

windows7-x64

7

office2019...dl.dll

windows10-2004-x64

7

office2019...b1.dll

windows7-x64

7

office2019...b1.dll

windows10-2004-x64

7

office2019...PP.vbs

windows7-x64

8

office2019...PP.vbs

windows10-2004-x64

8

office2019...cn.vbs

windows7-x64

8

office2019...cn.vbs

windows10-2004-x64

8

office2019...RM.exe

windows7-x64

1

office2019...RM.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/05/2024, 11:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    office2019pjb_9435/office2019pjb/OTool/files/activate/OSPP.vbs

  • Size

    102KB

  • MD5

    1b12cc712b648c0f05aed3e0ec99aaab

  • SHA1

    2dd149d0ed2c9beb81d8766540e73068084b0161

  • SHA256

    2037f0310fe838fb2aa02cdd2e8cef237aa806ed02cbbe01403772b360577d0f

  • SHA512

    1d3d4881875fc7dbe59ad57e769c9d37689d6f520289a8ffafe5482c3e2a51f913545c9d30b05a4a5316e69b32f2436bee6e24c1854ac2cb117820b94935cc32

  • SSDEEP

    1536:F8fEzb/rgGpRrjDJkCkRFklYfC6YGu/Iy7gz:yOgGpdDJkCkRFkWCs0IC0

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 1 IoCs

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\office2019pjb_9435\office2019pjb\OTool\files\activate\OSPP.vbs"
    1⤵
    • Blocklisted process makes network request
    PID:2492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads