Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10-07-2024 16:09
General
-
Target
$TEMP/firefox.vbs
-
Size
1KB
-
MD5
7513b697b3e19834b490d790cbadffba
-
SHA1
e347c3e4cabd1fdc395f9652aeaabddc9b4e93c1
-
SHA256
f8253d735820824a0a46ec74512404dd89cd13dec098c03d0f2bb2f57dada4e5
-
SHA512
9bd12277609d015fdf16a763a306a3ed705af0865808856626b34fc602b5d2bce4977ea7e5f7048a73c1c8b7d895c202114f13882ee19ba7f7850415c0501b4a
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\$TEMP\firefox.vbs"1⤵