Overview

overview

7

Static

static

7

wwwroot/GetCode.asp

windows7-x64

3

wwwroot/GetCode.asp

windows10-2004-x64

3

wwwroot/bottom.asp

windows7-x64

3

wwwroot/bottom.asp

windows10-2004-x64

3

wwwroot/ch...pe.asp

windows7-x64

3

wwwroot/ch...pe.asp

windows10-2004-x64

3

wwwroot/ch...te.asp

windows7-x64

3

wwwroot/ch...te.asp

windows10-2004-x64

3

wwwroot/client.asp

windows7-x64

3

wwwroot/client.asp

windows10-2004-x64

3

wwwroot/crm/1.html

windows7-x64

3

wwwroot/crm/1.html

windows10-2004-x64

3

wwwroot/cr...er.asp

windows7-x64

3

wwwroot/cr...er.asp

windows10-2004-x64

3

wwwroot/cr...nt.asp

windows7-x64

3

wwwroot/cr...nt.asp

windows10-2004-x64

3

wwwroot/cr...xe.asp

windows7-x64

3

wwwroot/cr...xe.asp

windows10-2004-x64

3

wwwroot/cr...st.asp

windows7-x64

3

wwwroot/cr...st.asp

windows10-2004-x64

3

wwwroot/cr...nd.asp

windows7-x64

3

wwwroot/cr...nd.asp

windows10-2004-x64

3

wwwroot/cr...se.vbs

windows7-x64

1

wwwroot/cr...se.vbs

windows10-2004-x64

1

wwwroot/cr...ig.asp

windows7-x64

3

wwwroot/cr...ig.asp

windows10-2004-x64

3

wwwroot/cr.../i.vbs

windows7-x64

1

wwwroot/cr.../i.vbs

windows10-2004-x64

1

wwwroot/cr...ss.vbs

windows7-x64

1

wwwroot/cr...ss.vbs

windows10-2004-x64

1

wwwroot/cr...ad.vbs

windows7-x64

1

wwwroot/cr...ad.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/08/2024, 20:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    wwwroot/crm/HtmlEditor/Asp/upload.vbs

  • Size

    18KB

  • MD5

    17add72c9e4c0b9444d387b48cfa03e7

  • SHA1

    a25f06b5007538ddfb201a4137e9d89c16394e7b

  • SHA256

    0caf1b8fea206357ce3c6dfd06bc74fc2b32f966abddf1f6dd9aa04d52d1fe61

  • SHA512

    3a52cc471ca9cad32ec90df458988b858e926eb1a740251b021ea2c0f6d82eef44fd4ed2ccc018391b30f5012d3726d4ef8cf1881cbe3ac4e8b68ce794320b99

  • SSDEEP

    192:lyALYNFLmJAbsYHJp0OkUF6CnqL3EkqFuvfHlcIa3S2rlDljMNPWs2WNNc:QNqAjphF6CnqLaFuv/lcrxlgNPWaNNc

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\wwwroot\crm\HtmlEditor\Asp\upload.vbs"
    1⤵
      PID:4264

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads