hxxp://Set Sound = CreateObject("WMPlayer[.]OCX[.]7") Sound[.]URL = "Salto[.]wav" Sound[.]Controls[.]play do while Sound[.]currentmedia[.]duration = 0 wscript[.]sleep 100 loop wscript[.]sleep (int(Sound[.]currentmedia[.]duration)+1)*1000

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://Set Sound = CreateObject("WMPlayer.OCX.7") Sound.URL = "Salto.wav" Sound.Controls.play do while Sound.currentmedia.duration = 0 wscript.sleep 100 loop wscript.sleep (int(Sound.currentmedia.duration)+1)*1000

Resource

win10v2004-20240730-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Sharing

General

Malware Config

Signatures

Files