Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
12-11-2024 06:21
General
-
Target
pkg/gems/soap4r-1.5.8/lib/soap/mapping/encodedregistry.vbs
-
Size
17KB
-
MD5
ea89d17d122b082279cd9f6aad1c0877
-
SHA1
d87e087222486da277cf1d4ba705f2eea7aa06e3
-
SHA256
13bd6c808fb41b54ffa528d2ef0a1ca7670500f1bf074a6c3e8da1cabfe4fd0f
-
SHA512
0cc22b5574d30aa29624e654d9b09323d011a3ae68e70bc62f1124cc633b83eaf305239a5c319aa90e09cfc5e088ffb147eebca95f29818a4ae6898794ef88f3
-
SSDEEP
384:+j/isN+ihbXXhbWiJoK3QUL5A0DmfHRcB1gXNL6zCdS+RBF:+eO+4bhbAKDA/RcB1gXt62dl
Score
3/10
Malware Config
Signatures
-
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\pkg\gems\soap4r-1.5.8\lib\soap\mapping\encodedregistry.vbs"1⤵
- System Network Configuration Discovery: Internet Connection Discovery