ff37bfe914dd0d8b5c7e6553f4204b8a65d4a9f9f1909ff7a3cf121070d05a20 | Triage

Submit
Reports

Overview

overview

6

Static

static

1

node_expor...porter

ubuntu-22.04-amd64

6

prometheus...nu.vbs

windows7-x64

1

prometheus...nu.vbs

windows10-2004-x64

1

prometheus...om.vbs

windows7-x64

1

prometheus...om.vbs

windows10-2004-x64

1

prometheus...u.html

windows7-x64

1

prometheus...u.html

windows10-2004-x64

1

prometheus...k.html

windows7-x64

1

prometheus...k.html

windows10-2004-x64

1

prometheus...w.html

windows7-x64

1

prometheus...w.html

windows10-2004-x64

1

prometheus...e.html

windows7-x64

1

prometheus...e.html

windows10-2004-x64

1

prometheus...w.html

windows7-x64

1

prometheus...w.html

windows10-2004-x64

1

prometheus...s.html

windows7-x64

1

prometheus...s.html

windows10-2004-x64

1

prometheus...etheus

ubuntu-22.04-amd64

3

prometheus...us.wsf

windows7-x64

1

prometheus...us.wsf

windows10-2004-x64

1

prometheus...omtool

ubuntu-22.04-amd64

3

windows_ex...nt.msi

windows7-x64

6

windows_ex...nt.msi

windows10-2004-x64

6

Analysis

max time kernel
444s
max time network
1173s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2024 06:24

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

node_exporter-Agent-Linux/node_exporter

Resource

ubuntu2204-amd64-20240611-en

ubuntu-22.04-amd64

5 signatures

1800 seconds

Behavioral task

behavioral2

Sample

prometheus - agent - Bastion/console_libraries/menu.vbs

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

prometheus - agent - Bastion/console_libraries/menu.vbs

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral4

Sample

prometheus - agent - Bastion/console_libraries/prom.vbs

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

prometheus - agent - Bastion/console_libraries/prom.vbs

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

prometheus - agent - Bastion/consoles/node-cpu.html

Resource

win7-20240508-en

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral7

Sample

prometheus - agent - Bastion/consoles/node-cpu.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

1800 seconds

Behavioral task

behavioral8

Sample

prometheus - agent - Bastion/consoles/node-disk.html

Resource

win7-20240221-en

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral9

Sample

prometheus - agent - Bastion/consoles/node-disk.html

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

prometheus - agent - Bastion/consoles/node-overview.html

Resource

win7-20240611-en

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral11

Sample

prometheus - agent - Bastion/consoles/node-overview.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

1800 seconds

Behavioral task

behavioral12

Sample

prometheus - agent - Bastion/consoles/node.html

Resource

win7-20240611-en

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral13

Sample

prometheus - agent - Bastion/consoles/node.html

Resource

win10v2004-20240611-en

windows10-2004-x64

6 signatures

1800 seconds

Behavioral task

behavioral14

Sample

prometheus - agent - Bastion/consoles/prometheus-overview.html

Resource

win7-20240508-en

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral15

Sample

prometheus - agent - Bastion/consoles/prometheus-overview.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

1800 seconds

Behavioral task

behavioral16

Sample

prometheus - agent - Bastion/consoles/prometheus.html

Resource

win7-20240508-en

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral17

Sample

prometheus - agent - Bastion/consoles/prometheus.html

Resource

win10v2004-20240611-en

windows10-2004-x64

6 signatures

1800 seconds

Behavioral task

behavioral18

Sample

prometheus - agent - Bastion/prometheus

Resource

ubuntu2204-amd64-20240611-en

ubuntu-22.04-amd64

3 signatures

1800 seconds

Behavioral task

behavioral19

Sample

prometheus - agent - Bastion/prometheus.wsf

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

prometheus - agent - Bastion/prometheus.wsf

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

prometheus - agent - Bastion/promtool

Resource

ubuntu2204-amd64-20240611-en

ubuntu-22.04-amd64

1 signatures

1800 seconds

Behavioral task

behavioral22

Sample

windows_exporter-Agent.msi

Resource

win7-20240611-en

persistence privilege_escalation

windows7-x64

13 signatures

1800 seconds

Behavioral task

behavioral23

Sample

windows_exporter-Agent.msi

Resource

win10v2004-20240508-en

persistence privilege_escalation

windows10-2004-x64

14 signatures

1800 seconds

Report Analysis Logs

General

Target

prometheus - agent - Bastion/prometheus.wsf
Size

934B
MD5

3a940c177917d9f3a6cc04b6956a0f63
SHA1

10b75634b565112912ea3b9c835024390b075db5
SHA256

6c568c1bdc95b97c1c35e565f4cd337d328eed000551e49b741d94e639e0a78f
SHA512

632989168aab545b3f6caff5a094f6a4836bd1cbf72e3adeb4a84b0a3731ac729ca820eef1ddf18bd8e23313d268c3c3ce975d13ae59df667678c6824908b92e

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\prometheus - agent - Bastion\prometheus.wsf"
1⤵
PID:1344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy