3c3bc763dd85a24d94a7a582d855ff978bd2fc2129a7100ba2a47c8359916e1e | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
30/06/2024, 08:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

file01.vbs
Size

630B
MD5

df47faec8dac8946be014ac183e71836
SHA1

a0f3acca7f518704b8807d4b0106dbe85c357c3d
SHA256

3c3bc763dd85a24d94a7a582d855ff978bd2fc2129a7100ba2a47c8359916e1e
SHA512

82e96e67a14d26adee92ae1e1c82e11c6383716c35cf39561971583e46daa05e0b453b60118d7bc6fb5768a88ef2e2de315072e54092fdedd47c62e926813ade

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\file01.vbs"
1⤵
PID:2180

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\WriteProtect.vbs"
1⤵
PID:2552

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\Desktop\CompleteSwitch.vbs

Filesize
630B

MD5
df47faec8dac8946be014ac183e71836

SHA1
a0f3acca7f518704b8807d4b0106dbe85c357c3d

SHA256
3c3bc763dd85a24d94a7a582d855ff978bd2fc2129a7100ba2a47c8359916e1e

SHA512
82e96e67a14d26adee92ae1e1c82e11c6383716c35cf39561971583e46daa05e0b453b60118d7bc6fb5768a88ef2e2de315072e54092fdedd47c62e926813ade

Download Submit