Resubmissions

31-05-2024 19:12

240531-xww3haah36 10

31-05-2024 19:08

240531-xtpkmsag46 7

Analysis

  • max time kernel
    94s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-05-2024 19:08

General

  • Target

    HellPr0ject.4.36ver/About/shily/tuner/rephaelGoxesBrasses/gotha.wsf

  • Size

    26KB

  • MD5

    89d2532ab091784a3b4b697f26c26521

  • SHA1

    d1e764e04e535fc0bc7c7d8e6c42a0cd0b5b2c29

  • SHA256

    6f3f58338a7f5263622c0d53fe3feb889a9985c3c00f2def1d012c6e6135fe8e

  • SHA512

    8d4696c02142540940e0aef5d49c4d7cee98acedfa86ae6adf96313bcd6d84cf802445de06fed301eea2e876d63ab6f7d085973036a6bfefb6ec677a65e831dc

  • SSDEEP

    384:FmJqxn3ekBjdEjWjkD5Ym6WKKfuqCQpFurbhIn2oIVN5Kg1CvxaA6oNSPHJRz:FbR1m2k+WKdZ+Furbhrf5Kg1RAoPHJR

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\HellPr0ject.4.36ver\About\shily\tuner\rephaelGoxesBrasses\gotha.wsf"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:5376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads