Overview
overview
7Static
static
3vmd194a53w...V7.exe
windows7-x64
7vmd194a53w...V7.exe
windows10-2004-x64
7scripts/tk...ox.vbs
windows7-x64
1scripts/tk...ox.vbs
windows10-2004-x64
1scripts/tk...te.vbs
windows7-x64
1scripts/tk...te.vbs
windows10-2004-x64
1scripts/tk...tk.vbs
windows7-x64
1scripts/tk...tk.vbs
windows10-2004-x64
1scripts/tk...ox.vbs
windows7-x64
1scripts/tk...ox.vbs
windows10-2004-x64
1scripts/tk...xt.vbs
windows7-x64
1scripts/tk...xt.vbs
windows10-2004-x64
1scripts/tk8.6/tk.vbs
windows7-x64
1scripts/tk8.6/tk.vbs
windows10-2004-x64
1scripts/tk...ox.vbs
windows7-x64
1scripts/tk...ox.vbs
windows10-2004-x64
1scripts/tk...rs.vbs
windows7-x64
1scripts/tk...rs.vbs
windows10-2004-x64
1scripts/tk...ry.vbs
windows7-x64
1scripts/tk...ry.vbs
windows10-2004-x64
1scripts/tk...on.vbs
windows7-x64
1scripts/tk...on.vbs
windows10-2004-x64
1scripts/tk...ew.vbs
windows7-x64
1scripts/tk...ew.vbs
windows10-2004-x64
1scripts/tk...tk.vbs
windows7-x64
1scripts/tk...tk.vbs
windows10-2004-x64
1scripts/tk...ox.vbs
windows7-x64
1scripts/tk...ox.vbs
windows10-2004-x64
1scripts/vm...ct.vbs
windows7-x64
1scripts/vm...ct.vbs
windows10-2004-x64
1scripts/vm...re.vbs
windows7-x64
1scripts/vm...re.vbs
windows10-2004-x64
1Analysis
- max time kernel
590s - max time network
599s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
14/06/2024, 14:01
Behavioral task
behavioral1
Sample
vmd194a53win64-SetupV7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
vmd194a53win64-SetupV7.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
scripts/tk8.6/msgbox.vbs
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
scripts/tk8.6/msgbox.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
scripts/tk8.6/palette.vbs
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
scripts/tk8.6/palette.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
scripts/tk8.6/safetk.vbs
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
scripts/tk8.6/safetk.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
scripts/tk8.6/spinbox.vbs
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
scripts/tk8.6/spinbox.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
scripts/tk8.6/text.vbs
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
scripts/tk8.6/text.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
scripts/tk8.6/tk.vbs
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
scripts/tk8.6/tk.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
scripts/tk8.6/tkfbox.vbs
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
scripts/tk8.6/tkfbox.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
scripts/tk8.6/ttk/cursors.vbs
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
scripts/tk8.6/ttk/cursors.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
scripts/tk8.6/ttk/entry.vbs
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
scripts/tk8.6/ttk/entry.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
scripts/tk8.6/ttk/menubutton.vbs
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
scripts/tk8.6/ttk/menubutton.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
scripts/tk8.6/ttk/treeview.vbs
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
scripts/tk8.6/ttk/treeview.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
scripts/tk8.6/ttk/ttk.vbs
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
scripts/tk8.6/ttk/ttk.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
scripts/tk8.6/xmfbox.vbs
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
scripts/tk8.6/xmfbox.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
scripts/vmd/atomselect.vbs
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
scripts/vmd/atomselect.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
scripts/vmd/biocore.vbs
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
scripts/vmd/biocore.vbs
Resource
win10v2004-20240611-en
General
- Target scripts/tk8.6/ttk/menubutton.vbs
- Size 6KB
- Sample240614-rbm17stdkb
- SHA256 d9af20135ef1bfeb3e0fd9fdabe821474de3ed43b3745a42fe564d24a8b9fd9c
- MD5 fe89894d8cbf415541a60d77192f0f94
- SHA1 c0716b2d8e24592757b62d24eeed57121b60e00f
- SHA512 66488cbcac49cca47c9c560648e891d429f40e46549f58687b98073eba4807a8458a277be093ebfc50709a8a87a529df4e526eccfb60803ce16af17b97accd3d
- SSDEEP 192:hfbJvnN+PN8JdNHC2yP9ZaOGOVyf1VdYwppcdhXk8dpK+dpKZxD2grrGAInehTOG:hfbRLRJDHco8zFzq6HG
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\scripts\tk8.6\ttk\menubutton.vbs"1⤵PID:4960
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3756,i,9746875443948590908,1444894342962555245,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:81⤵PID:636
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4252,i,9746875443948590908,1444894342962555245,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:81⤵PID:1076