Overview

overview

3

Static

static

3

川川免�...bs.vbs

windows7-x64

1

川川免�...bs.vbs

windows10-2004-x64

1

川川免�...D5.vbs

windows7-x64

1

川川免�...D5.vbs

windows10-2004-x64

1

川川免�...rl.vbs

windows7-x64

1

川川免�...rl.vbs

windows10-2004-x64

1

川川免�...ss.vbs

windows7-x64

1

川川免�...ss.vbs

windows10-2004-x64

1

川川免�...dd.vbs

windows7-x64

1

川川免�...dd.vbs

windows10-2004-x64

1

川川免�...od.asp

windows7-x64

3

川川免�...od.asp

windows10-2004-x64

3

川川免�...er.asp

windows7-x64

3

川川免�...er.asp

windows10-2004-x64

3

川川免�...te.vbs

windows7-x64

1

川川免�...te.vbs

windows10-2004-x64

1

川川免�...zu.vbs

windows7-x64

1

川川免�...zu.vbs

windows10-2004-x64

1

川川免�...min.js

windows7-x64

3

川川免�...min.js

windows10-2004-x64

3

川川免�...ad.asp

windows7-x64

3

川川免�...ad.asp

windows10-2004-x64

3

川川免�...ic.asp

windows7-x64

3

川川免�...ic.asp

windows10-2004-x64

3

川川免�...cf.vbs

windows7-x64

1

川川免�...cf.vbs

windows10-2004-x64

1

川川免�...en.vbs

windows7-x64

1

川川免�...en.vbs

windows10-2004-x64

川川免�...ta.vbs

windows7-x64

1

川川免�...ta.vbs

windows10-2004-x64

1

川川免�...en.vbs

windows7-x64

1

川川免�...en.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    95s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240729-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240729-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-07-2024 03:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    川川免费吧/admin/ReplaceRemoteUrl.vbs

  • Size

    3KB

  • MD5

    8481f86775c674b6c77881aca9345738

  • SHA1

    1835e9ad970e3baa2b703de205f08371906e81d2

  • SHA256

    ae3ba5f1d58e113b3d496957899433c17ef785af4b163f958ecab309f44087e2

  • SHA512

    af35716c27c483858c46a916ba80fbbc5a3809536c7e6716e2221acf8bcb44c8f72805c05d7afcfdf4d46818391e465ae32484c7968acbe97562f889fbc17ef4

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\川川免费吧\admin\ReplaceRemoteUrl.vbs"
    1⤵
      PID:4432

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads