Overview
overview
10Static
static
10MsSavesSes...YY.bat
windows7-x64
8MsSavesSes...YY.bat
windows10-2004-x64
8MsSavesSes...O1.vbe
windows7-x64
3MsSavesSes...O1.vbe
windows10-2004-x64
3MsSavesSes...rf.exe
windows7-x64
10MsSavesSes...rf.exe
windows10-2004-x64
10MsSavesSes...le.vbs
windows7-x64
1MsSavesSes...le.vbs
windows10-2004-x64
1Analysis
-
max time kernel
95s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2024 18:56
Behavioral task
behavioral1
Sample
MsSavesSessionDll/9KjI6fqbs0yhjc5d8qYY.bat
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
MsSavesSessionDll/9KjI6fqbs0yhjc5d8qYY.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
MsSavesSessionDll/KGvUTlEKtYKB1JaFEhyBUO1.vbe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
MsSavesSessionDll/KGvUTlEKtYKB1JaFEhyBUO1.vbe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
MsSavesSessionDll/agentreviewPerf.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
MsSavesSessionDll/agentreviewPerf.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
MsSavesSessionDll/file.vbs
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
MsSavesSessionDll/file.vbs
Resource
win10v2004-20241007-en
General
-
Target
MsSavesSessionDll/KGvUTlEKtYKB1JaFEhyBUO1.vbe
-
Size
214B
-
MD5
70a585216ae3ecc7d0bb56903c227315
-
SHA1
6b661f901134aec8eba29d6b45cff5f8d9d56a58
-
SHA256
79fb626b5bf797bc6e1c72af3be07bbb1a606587890f1806b20ac984d57201c0
-
SHA512
02296eaa4d02a535b98961c1aeb410ff505b0e56e23eb7459f945707b94132cadaf12260e97cabff4e3981bc04bfd0318c4a1701eff92446edd5889609c806d9
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).