Analysis
-
max time kernel
102s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20250410-en -
resource tags
-
submitted
13/04/2025, 02:36
General
-
Target
ipras.vbs
-
Size
126B
-
MD5
b802ff9244875f69db2fae0f78e92b10
-
SHA1
49385a89cd575894a29fbda969b99cc1f5cf8076
-
SHA256
a1b0cb16fb2ecd66fccf156024404801ad694056e8a596326c1b27b57d8eabe8
-
SHA512
609856415a7ae2b3e260f945f1c8a8d2a28884c202d37181bea948708918f24b42ae03f17dba1520fddc91b2f7a182b0b8f885f33ea6f81bb3ee4c72e4e9350e
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 3 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\ipras.vbs"1⤵
- Blocklisted process makes network request