Overview

overview

3

Static

static

1

泸西热�...in.vbs

windows7-x64

1

泸西热�...in.vbs

windows10-2004-x64

1

泸西热�...in.vbs

windows7-x64

1

泸西热�...in.vbs

windows10-2004-x64

1

泸西热�...art.js

windows7-x64

3

泸西热�...art.js

windows10-2004-x64

3

泸西热�...ig.vbs

windows7-x64

1

泸西热�...ig.vbs

windows10-2004-x64

1

泸西热�...ry.vbs

windows7-x64

1

泸西热�...ry.vbs

windows10-2004-x64

1

泸西热�...dj.vbs

windows7-x64

1

泸西热�...dj.vbs

windows10-2004-x64

1

泸西热�...wn.vbs

windows7-x64

1

泸西热�...wn.vbs

windows10-2004-x64

1

泸西热�...js.vbs

windows7-x64

1

泸西热�...js.vbs

windows10-2004-x64

1

泸西热�...nk.vbs

windows7-x64

1

泸西热�...nk.vbs

windows10-2004-x64

1

泸西热�...ews.js

windows7-x64

3

泸西热�...ews.js

windows10-2004-x64

3

泸西热�...er.vbs

windows7-x64

1

泸西热�...er.vbs

windows10-2004-x64

1

泸西热�...ic.vbs

windows7-x64

1

泸西热�...ic.vbs

windows10-2004-x64

1

泸西热�...ew.vbs

windows7-x64

1

泸西热�...ew.vbs

windows10-2004-x64

1

泸西热�...ok.vbs

windows7-x64

1

泸西热�...ok.vbs

windows10-2004-x64

1

泸西热�...te.vbs

windows7-x64

1

泸西热�...te.vbs

windows10-2004-x64

1

泸西热�...eb.vbs

windows7-x64

1

泸西热�...eb.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    96s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/09/2024, 12:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    泸西热线 v1.2 蓝雨修改版/admin_config.vbs

  • Size

    16KB

  • MD5

    180a19371d599caa1a88881b94ebebb5

  • SHA1

    f5f62f4dc108d3ea5e2844ff8545d85474316652

  • SHA256

    546073a5ef985bcf023056f30476af36c2a9e856200a7f229a8834e966fdd2dc

  • SHA512

    9395a190647099b17ed18e9a4adcb32d8d529c1fe6030112a0636fe77283f33472eb2401f544b2f3eaefd44438ad3f9db525d316664034c3e3e8fee9f9eb26a1

  • SSDEEP

    192:ChCT02ml0ayjC93iVbeg1AwaYFl3aWlONZ6KgIYXBJpaaThiCQtiUJU4lE1U27cj:ChQFHnQX

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\泸西热线 v1.2 蓝雨修改版\admin_config.vbs"
    1⤵
      PID:2352

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads