Overview

overview

3

Static

static

1

泸西热�...in.vbs

windows7-x64

1

泸西热�...in.vbs

windows10-2004-x64

1

泸西热�...in.vbs

windows7-x64

1

泸西热�...in.vbs

windows10-2004-x64

1

泸西热�...art.js

windows7-x64

3

泸西热�...art.js

windows10-2004-x64

3

泸西热�...ig.vbs

windows7-x64

1

泸西热�...ig.vbs

windows10-2004-x64

1

泸西热�...ry.vbs

windows7-x64

1

泸西热�...ry.vbs

windows10-2004-x64

1

泸西热�...dj.vbs

windows7-x64

1

泸西热�...dj.vbs

windows10-2004-x64

1

泸西热�...wn.vbs

windows7-x64

1

泸西热�...wn.vbs

windows10-2004-x64

1

泸西热�...js.vbs

windows7-x64

1

泸西热�...js.vbs

windows10-2004-x64

1

泸西热�...nk.vbs

windows7-x64

1

泸西热�...nk.vbs

windows10-2004-x64

1

泸西热�...ews.js

windows7-x64

3

泸西热�...ews.js

windows10-2004-x64

3

泸西热�...er.vbs

windows7-x64

1

泸西热�...er.vbs

windows10-2004-x64

1

泸西热�...ic.vbs

windows7-x64

1

泸西热�...ic.vbs

windows10-2004-x64

1

泸西热�...ew.vbs

windows7-x64

1

泸西热�...ew.vbs

windows10-2004-x64

1

泸西热�...ok.vbs

windows7-x64

1

泸西热�...ok.vbs

windows10-2004-x64

1

泸西热�...te.vbs

windows7-x64

1

泸西热�...te.vbs

windows10-2004-x64

1

泸西热�...eb.vbs

windows7-x64

1

泸西热�...eb.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    93s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/09/2024, 12:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    泸西热线 v1.2 蓝雨修改版/admin_down.vbs

  • Size

    45KB

  • MD5

    c29baff47bbeee07ce50c5c08782f127

  • SHA1

    4e266695c6b4a64fec91c8101b58d047df41752b

  • SHA256

    f0fe1915bdc09204237c8c1360183b746cf2a2299c6607386cb76cfa712f952d

  • SHA512

    894bfe1e5ac0e2581bff6e99260884640212cad50ac869191b448b9a7886ebe951f22f0a97ccafab3b7573d269d9e751ba5def16d1c39cd8f4120dfb4a089787

  • SSDEEP

    768:Ltl/+UtktDYwUoksYUyjQ1HNIhlu+/CukQh0fcCukQp06KyQOAQOlK:Ltl/+UtktDYwUoksYUyjQ1HSi+/CukQB

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\泸西热线 v1.2 蓝雨修改版\admin_down.vbs"
    1⤵
      PID:4244

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads