Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2025, 16:30

General

  • Target

    $PROGRAMFILES/files/q.vbs

  • Size

    2KB

  • MD5

    97af5fe6faf87f3a438f6220e4a67337

  • SHA1

    431095968ed4b65f95d548a2aee327dd27a23f2a

  • SHA256

    5ec1a99388aff9ac4333f616df25dbb1e9d2c0ee46fa8c2837c7c329b0c24e73

  • SHA512

    03f1b50f954af9d2244f7ebc36a27d1334ecacc00ecd307c3aec0c1854357656a6c0d3c2e6f1f081a9d02bd82b3a3490bad52174e58a6104a9aa11e8f973141f

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\$PROGRAMFILES\files\q.vbs"
    1⤵
      PID:2856

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\Favorites\ÌÔ ±¦ Íø.url

      Filesize

      112B

      MD5

      09d199f776b33aa741813f14220997db

      SHA1

      db1f8b39d8e0c276a66eb1741ac50d1775954f74

      SHA256

      7e03b04fc11a34dc8c526f82bd8c9c072bbc30e1485324fb3a761ec4d515d362

      SHA512

      5fb0fb5e5cb339d771a6da9268bc7fdd3d4c713d06bb1941b9401ebe6095a6d869bdb1a119e27506f558eb2bbb063ee63bb94c21381edd01419e5068db33b588

    • C:\Users\Admin\Favorites\ÒÁÈËÅ®ÐÔ.url

      Filesize

      111B

      MD5

      4f7d19b035aca450d83d0e5029394e1c

      SHA1

      1129ff14825f14b59e2f6a536bc497f687827e15

      SHA256

      a1cd94c24fd672ce5142177abe3177ac0a6cbc395a1fb654b2cf8ae7eb0d8a2a

      SHA512

      ae2d1e3209341af7b2e45495eef1bac1e59a2317d5f8424d5122cf54a94ccb4b13544ce608a932ed40232ac6bb63cef8d97d9d17b470ece64910c9b565445326

    • C:\Users\Admin\Favorites\ÔÚÏßСÓÎÏ·.url

      Filesize

      112B

      MD5

      09c7d93e36ef27366b29169398d14d16

      SHA1

      7079dfa642929cc3a10ab7204fac3603d5f797dc

      SHA256

      b06c69c0908783941fbb41ff98b4a1fe9e496045f928c4f62552216a4f9bb63e

      SHA512

      682d4691e12bf6e5e23eabf6e562bfa8d10c10c4da2cfe955deee1e71f10c1db098c500695a3250be59ef15c68e6a03426a3e77e1b20299823aefbd4b4ec925f