16e63b02ecab333d53a5db8a61afcc2e7baf17f22f1e905683bc4d4350f24986 | Triage

Analysis

max time kernel
140s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
27-06-2024 14:04

Sharing

Report Analysis Logs

General

Target

$TEMP/ff2.vbs
Size

3KB
MD5

05ce4383e613c348c77b34f90fee0b08
SHA1

9deaea1d8cb920ca8d324a8852f948a39d5198e8
SHA256

4dba7ec5ae5f8200542de8f10a5564a055067dd9744537718fd8dc29b771c8c1
SHA512

ee6e1da13f8a34845a342081e476e95cf728b62ffa9d503f4a9b4b2b033acf2a0f55429a57844ab7d25efaca8dbee8779b01ceab0f516c39438434b179dba1ab

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\Program Files\Mozilla Firefox\searchplugins\pucuy.xml	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\$TEMP\ff2.vbs"
1⤵
- Drops file in Program Files directory
PID:4908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4440,i,6870419347051655189,5491911050420577193,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
1⤵
PID:3376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads