Overview

overview

3

Static

static

1

泸西热�...in.vbs

windows7-x64

1

泸西热�...in.vbs

windows10-2004-x64

1

泸西热�...in.vbs

windows7-x64

1

泸西热�...in.vbs

windows10-2004-x64

1

泸西热�...art.js

windows7-x64

3

泸西热�...art.js

windows10-2004-x64

3

泸西热�...ig.vbs

windows7-x64

1

泸西热�...ig.vbs

windows10-2004-x64

1

泸西热�...ry.vbs

windows7-x64

1

泸西热�...ry.vbs

windows10-2004-x64

1

泸西热�...dj.vbs

windows7-x64

1

泸西热�...dj.vbs

windows10-2004-x64

1

泸西热�...wn.vbs

windows7-x64

1

泸西热�...wn.vbs

windows10-2004-x64

1

泸西热�...js.vbs

windows7-x64

1

泸西热�...js.vbs

windows10-2004-x64

1

泸西热�...nk.vbs

windows7-x64

1

泸西热�...nk.vbs

windows10-2004-x64

1

泸西热�...ews.js

windows7-x64

3

泸西热�...ews.js

windows10-2004-x64

3

泸西热�...er.vbs

windows7-x64

1

泸西热�...er.vbs

windows10-2004-x64

1

泸西热�...ic.vbs

windows7-x64

1

泸西热�...ic.vbs

windows10-2004-x64

1

泸西热�...ew.vbs

windows7-x64

1

泸西热�...ew.vbs

windows10-2004-x64

1

泸西热�...ok.vbs

windows7-x64

1

泸西热�...ok.vbs

windows10-2004-x64

1

泸西热�...te.vbs

windows7-x64

1

泸西热�...te.vbs

windows10-2004-x64

1

泸西热�...eb.vbs

windows7-x64

1

泸西热�...eb.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    95s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240910-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/09/2024, 12:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    泸西热线 v1.2 蓝雨修改版/admin_news.js

  • Size

    22KB

  • MD5

    4113a7f4e1feae0b794a44e4ae72d6dd

  • SHA1

    abbf16fcc8577572c08d7a5f91a36e500f79b3e8

  • SHA256

    12dd9e57441af52a56b4bdb1f7c28b5a87537c5b92097313d6415ab1d9833b51

  • SHA512

    b22f9e1de2236e7097e6c7ef9bcddbd6fd177f25679e242bb1bec2c8862b4492c95af92f7521844de3f4b199e8c4109abdffa44e3c24488f4fda44f65e1b61cb

  • SSDEEP

    384:cOmmTm02sa+0jTx02st0jT6NTUOGLKRBTi+UQSTskRQSTG3:LRq02sx0jd02st0jOZTQQStQSO

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe "C:\Users\Admin\AppData\Local\Temp\泸西热线 v1.2 蓝雨修改版\admin_news.js"
    1⤵
      PID:1188

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads