Overview

overview

3

Static

static

1

泸西热�...in.vbs

windows7-x64

1

泸西热�...in.vbs

windows10-2004-x64

1

泸西热�...in.vbs

windows7-x64

1

泸西热�...in.vbs

windows10-2004-x64

1

泸西热�...art.js

windows7-x64

3

泸西热�...art.js

windows10-2004-x64

3

泸西热�...ig.vbs

windows7-x64

1

泸西热�...ig.vbs

windows10-2004-x64

1

泸西热�...ry.vbs

windows7-x64

1

泸西热�...ry.vbs

windows10-2004-x64

1

泸西热�...dj.vbs

windows7-x64

1

泸西热�...dj.vbs

windows10-2004-x64

1

泸西热�...wn.vbs

windows7-x64

1

泸西热�...wn.vbs

windows10-2004-x64

1

泸西热�...js.vbs

windows7-x64

1

泸西热�...js.vbs

windows10-2004-x64

1

泸西热�...nk.vbs

windows7-x64

1

泸西热�...nk.vbs

windows10-2004-x64

1

泸西热�...ews.js

windows7-x64

3

泸西热�...ews.js

windows10-2004-x64

3

泸西热�...er.vbs

windows7-x64

1

泸西热�...er.vbs

windows10-2004-x64

1

泸西热�...ic.vbs

windows7-x64

1

泸西热�...ic.vbs

windows10-2004-x64

1

泸西热�...ew.vbs

windows7-x64

1

泸西热�...ew.vbs

windows10-2004-x64

1

泸西热�...ok.vbs

windows7-x64

1

泸西热�...ok.vbs

windows10-2004-x64

1

泸西热�...te.vbs

windows7-x64

1

泸西热�...te.vbs

windows10-2004-x64

1

泸西热�...eb.vbs

windows7-x64

1

泸西热�...eb.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/09/2024, 12:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    泸西热线 v1.2 蓝雨修改版/admin_web.vbs

  • Size

    24KB

  • MD5

    ca1e4accc21fb64f99a3406878184464

  • SHA1

    323d5b6034de26dc94b0b769593d30c8dc5f30fd

  • SHA256

    2b5817fbcb0aa8a34e0430654e469b7d9f35c2a8a5328476e17f4a0fd632b132

  • SHA512

    e98a85e556f846090103753ac7d20f2d35e32a4717b276c8c1ff71e4cbf66ac065307aff83edd42941d8a37e671cb318bc59d620e0d12a43376322d97ff6e936

  • SSDEEP

    768:kpVs7NwBUn9l0QtNwBUPU0QU02EY02QfQN/QN48G4NIQ3agQ3MH:kpVs7NwBUn9l0QtNwBUPU0QU02EY02Q1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\泸西热线 v1.2 蓝雨修改版\admin_web.vbs"
    1⤵
      PID:4276

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads