Malware Analysis Report

2025-04-14 03:22

Sample ID 240612-t2dlka1gpe
Target 12062024_1632_12062024_Specifications.zip
SHA256 b3bba2b84d1cd2cb5aa877defb78369fbc2a3e14de3920c72faa07a9cf67c27e
Tags
score
1/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
1/10

SHA256

b3bba2b84d1cd2cb5aa877defb78369fbc2a3e14de3920c72faa07a9cf67c27e

Threat Level: No (potentially) malicious behavior was detected

The file 12062024_1632_12062024_Specifications.zip was found to be: No (potentially) malicious behavior was detected.

Malicious Activity Summary

N/A

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-12 16:32

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-12 16:32

Reported

2024-06-12 16:35

Platform

win7-20240508-en

Max time kernel

118s

Max time network

118s

Command Line

"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Specifications.vbs"

Signatures

N/A

Processes

C:\Windows\System32\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Specifications.vbs"

Network

Country Destination Domain Proto
US 8.8.8.8:53 paste.ee udp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-12 16:32

Reported

2024-06-12 16:35

Platform

win10v2004-20240508-en

Max time kernel

147s

Max time network

150s

Command Line

"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Specifications.vbs"

Signatures

N/A

Processes

C:\Windows\System32\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Specifications.vbs"

Network

Country Destination Domain Proto
US 8.8.8.8:53 paste.ee udp

Files

N/A