59fe7d14e9e771401012c47da2ee41c08236382cc18d6bcae9a4148a72bd24c6

Submit
Reports

Overview

overview

Static

static

john-1.9.0...ES.vbs

windows7-x64

john-1.9.0...ES.vbs

windows10-2004-x64

john-1.9.0...ohn.py

ubuntu-18.04-amd64

john-1.9.0...ohn.py

debian-9-armhf

john-1.9.0...ohn.py

debian-9-mips

john-1.9.0...ohn.py

debian-9-mipsel

john-1.9.0...ohn.pl

ubuntu-18.04-amd64

john-1.9.0...ohn.pl

debian-9-armhf

john-1.9.0...ohn.pl

debian-9-mips

john-1.9.0...ohn.pl

debian-9-mipsel

john-1.9.0...ohn.py

ubuntu-18.04-amd64

john-1.9.0...ohn.py

debian-9-armhf

john-1.9.0...ohn.py

debian-9-mips

john-1.9.0...ohn.py

debian-9-mipsel

john-1.9.0...ohn.py

ubuntu-18.04-amd64

john-1.9.0...ohn.py

debian-9-armhf

john-1.9.0...ohn.py

debian-9-mips

john-1.9.0...ohn.py

debian-9-mipsel

john-1.9.0...ohn.py

ubuntu-18.04-amd64

john-1.9.0...ohn.py

debian-9-armhf

john-1.9.0...ohn.py

debian-9-mips

john-1.9.0...ohn.py

debian-9-mipsel

john-1.9.0...ohn.pl

ubuntu-18.04-amd64

john-1.9.0...ohn.pl

debian-9-armhf

john-1.9.0...ohn.pl

debian-9-mips

john-1.9.0...ohn.pl

debian-9-mipsel

john-1.9.0...ohn.py

ubuntu-18.04-amd64

john-1.9.0...ohn.py

debian-9-armhf

john-1.9.0...ohn.py

debian-9-mips

john-1.9.0...ohn.py

debian-9-mipsel

john-1.9.0...ohn.py

ubuntu-18.04-amd64

john-1.9.0...ohn.py

debian-9-armhf

Analysis

max time kernel
146s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15-07-2024 01:46

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf evasion

2 signatures

Behavioral task

behavioral1

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/doc/MODES.vbs

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/doc/MODES.vbs

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/1password2john.py

Resource

ubuntu1804-amd64-20240508-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/1password2john.py

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/1password2john.py

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/1password2john.py

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/7z2john.pl

Resource

ubuntu1804-amd64-20240508-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/7z2john.pl

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/7z2john.pl

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/7z2john.pl

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/DPAPImk2john.py

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/DPAPImk2john.py

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/DPAPImk2john.py

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/DPAPImk2john.py

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/adxcsouf2john.py

Resource

ubuntu1804-amd64-20240508-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/adxcsouf2john.py

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/adxcsouf2john.py

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/adxcsouf2john.py

Resource

debian9-mipsel-20240226-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aem2john.py

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aem2john.py

Resource

debian9-armhf-20240418-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aem2john.py

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aem2john.py

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aix2john.pl

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aix2john.pl

Resource

debian9-armhf-20240418-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aix2john.pl

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aix2john.pl

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aix2john.py

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aix2john.py

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aix2john.py

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/aix2john.py

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/andotp2john.py

Resource

ubuntu1804-amd64-20240508-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/run/andotp2john.py

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Report Analysis Logs

General

Target

john-1.9.0-jumbo-1-win64/john-1.9.0-jumbo-1-win64/doc/MODES.vbs
Size

9KB
MD5

f831417603c3e39d1c4227f94a37b54e
SHA1

71a74b5f70119f8e63ac9222036ab4d80923006d
SHA256

455b1183ebf89a912d03b231178949d26921ba2f9e1f44ed952d759a07044a6e
SHA512

fa6d189eb2c2de17600258e5b02ae0eaac7d1a680c1346acb6823ba9b45ee18b4465d4ca818174aa7f9ff732b24b3dd6e3a38d25879f66f4c33cbe1bc444ca10
SSDEEP

192:oVNNxR24s5+IGMWJ+N4hLVFA83h0CqXhi77pd:MNNxR24K+IGMWq4P683h0CIinpd

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\john-1.9.0-jumbo-1-win64\john-1.9.0-jumbo-1-win64\doc\MODES.vbs"
1⤵
PID:3364

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads