Overview

overview

7

Static

static

3

cscpt.exe

windows7-x64

7

cscpt.exe

windows10-2004-x64

7

cscpt.pyc

windows7-x64

3

cscpt.pyc

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/06/2024, 01:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    cscpt.exe
  • Size 7.9MB
  • Sample240620-bnst8a1aqa
  • SHA256 7d551f3ea29e98532930d0be830e104dda0b2de79626a5ccea056b5daff755e1
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 10 IoCs
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cscpt.exe
    "C:\Users\Admin\AppData\Local\Temp\cscpt.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1540
    • C:\Users\Admin\AppData\Local\Temp\cscpt.exe
      "C:\Users\Admin\AppData\Local\Temp\cscpt.exe"
      2⤵
      • Loads dropped DLL
      PID:1552

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\VCRUNTIME140.dll
        • Size 93KB
        • SHA256 6a0850419432735a98e56857d5cfce97e9d58a947a9863ca6afadd1c7bcab27c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\_bz2.pyd
        • Size 85KB
        • SHA256 ce4ef8ed1e72c1d3a6082d500a17a009eb6e8ed15022bf3b68a22291858feced
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _cffi_backend.cp38-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\_cffi_backend.cp38-win_amd64.pyd
        • Size 177KB
        • SHA256 f7a00ba343d6f1ea8997d95b242fbbd70856ec2b98677d5f8b52921b8658369c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\_ctypes.pyd
        • Size 124KB
        • SHA256 820e840759eed12e19f3c485fd819b065b49d9dc704ae3599a63077416d63324
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\_hashlib.pyd
        • Size 46KB
        • SHA256 a30cf1a40e0b09610e34be187f1396ac5a44dcfb27bc7ff9b450d1318b694c1b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\_lzma.pyd
        • Size 159KB
        • SHA256 9209ccc60115727b192bf7771551040ca6fdd50f9bf8c3d2eacbfd424e8245e4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\_queue.pyd
        • Size 28KB
        • SHA256 67e4e888559ea2c62ff267b58d7a7e95c2ec361703b5aa232aa8b2a1f96a2051
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\_socket.pyd
        • Size 78KB
        • SHA256 87832a3b89e2ada8f704a8f066013660d591d9ce01ce901cc57a3b973f0858ba
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\base_library.zip
        • Size 824KB
        • SHA256 7c1c73de4909d11efb20028f4745a9c8494fb4ee8dcf2f049907115def3d2629
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _rust.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\cryptography\hazmat\bindings\_rust.pyd
        • Size 6.9MB
        • SHA256 9029825852300e1de0f6b5bb31df9ba3a847da517750088e1a96d01b6cd4e71a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\libcrypto-1_1.dll
        • Size 3.2MB
        • SHA256 296426e7ce11bc3d1cfa9f2aeb42f60c974da4af3b3efbeb0ba40e92e5299fdf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\python3.DLL
        • Size 58KB
        • SHA256 074b06ae1d0a0b5c26f0ce097c91e2f24a5d38b279849115495fc40c6c10117e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python38.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\python38.dll
        • Size 4.0MB
        • SHA256 2f3e368f5bcc1dda5e951682008a509751e6395f7328fd0f02c4e1a11f67c128
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\select.pyd
        • Size 27KB
        • SHA256 fcc2e09a2355a5546922874fb4cac92ee00a33c0ed6adbc440d128d1e9f4ec28
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI15402\unicodedata.pyd
        • Size 1.0MB
        • SHA256 d8091e62c74e1b2b648086f778c3c41ce01f09661a75ea207d3fea2cf26a8762
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download