Overview

overview

7

Static

static

3

fd467ed77f...18.exe

windows7-x64

7

fd467ed77f...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

Config.dll

windows7-x64

3

Config.dll

windows10-2004-x64

3

OpenConf.chm

windows7-x64

1

OpenConf.chm

windows10-2004-x64

1

config/KbdProcs.dll

windows7-x64

3

config/KbdProcs.dll

windows10-2004-x64

3

config/SubSystems.dll

windows7-x64

3

config/SubSystems.dll

windows10-2004-x64

3

config/doc...k.html

windows7-x64

3

config/doc...k.html

windows10-2004-x64

3

config/doc...at.chm

windows7-x64

1

config/doc...at.chm

windows10-2004-x64

1

config/fdsubst.dll

windows7-x64

3

config/fdsubst.dll

windows10-2004-x64

3

config/scr...ge.vbs

windows7-x64

1

config/scr...ge.vbs

windows10-2004-x64

1

config/scr...rts.js

windows7-x64

3

config/scr...rts.js

windows10-2004-x64

3

config/scr...at.vbs

windows7-x64

1

config/scr...at.vbs

windows10-2004-x64

1

config/sys...ry.exe

windows7-x64

3

config/sys...ry.exe

windows10-2004-x64

3

config/sys...er.exe

windows7-x64

3

config/sys...er.exe

windows10-2004-x64

3

config/sys...ls.exe

windows7-x64

3

config/sys...ls.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    14s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 22:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    config/scripts/SubSystemsManage.vbs

  • Size

    29KB

  • MD5

    db120559cbf76ff6a5823353e85b094a

  • SHA1

    d5d6f014d67679477cf6873ae4fda31e8cd795c3

  • SHA256

    b3576d625092ad416e4d456230d1d8a8b6a0cf7364b4bcd9e8c5d8c147819aa4

  • SHA512

    164b3fb8740db28b055288f887f76ca2ebea9aa74fe740fb7d750ebbff40fe8a5517ef6eec038dbf144b06cd551f628194f03cbd079f5ac0c5330a28601899fa

  • SSDEEP

    384:W+NfYX+FfJ1iPJJQpuNc6zJxKi35nBDHImfQeSCf80GbeiS0NElT3skmsr:BNru4EcktPom4eSC00GbeiSFqsr

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\config\scripts\SubSystemsManage.vbs"
    1⤵
      PID:1824

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads