Overview
overview
6Static
static
1github.com...NS.ps1
windows10-2004-x64
6github.com...NS.ps1
windows11-21h2-x64
6github.com...ST-.js
windows10-2004-x64
3github.com...ST-.js
windows11-21h2-x64
3github.com...T-.ps1
windows10-2004-x64
6github.com...T-.ps1
windows11-21h2-x64
6github.com...es.vbs
windows10-2004-x64
1github.com...es.vbs
windows11-21h2-x64
1github.com...ds.ps1
windows10-2004-x64
6github.com...ds.ps1
windows11-21h2-x64
6github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...37.vbs
windows10-2004-x64
1github.com...37.vbs
windows11-21h2-x64
1github.com...ICA.js
windows10-2004-x64
3github.com...ICA.js
windows11-21h2-x64
3github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...160.js
windows10-2004-x64
3github.com...160.js
windows11-21h2-x64
3github.com...370.js
windows10-2004-x64
3github.com...370.js
windows11-21h2-x64
3github.com...390.js
windows10-2004-x64
3github.com...390.js
windows11-21h2-x64
3github.com...150.js
windows10-2004-x64
3github.com...150.js
windows11-21h2-x64
3github.com...320.js
windows10-2004-x64
3github.com...320.js
windows11-21h2-x64
3github.com...110.js
windows10-2004-x64
3github.com...110.js
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win11-20260513-en
General
- Target github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
- Size 264B
- Sample260602-wvbvhadt6l
- SHA256 cef3ac262bd5aff61eff1ed783ced149041bd44667cfd68a224d765b91a4660a
- MD5 600e22c0b8ae14332997afb6c9df9adf
- SHA1 db24d13f28023a7f35774fee23da66656642a532
- SHA512 838dbe695738abc3c51a4c2bcff1ba6292a01dc4cf2a25fcaaa8fb6a91c1ba351fe95199ec53fb5cb4356aaf633661525f0782c92c9ffde5ab0cef18a205fd89
- TLSH T177D05E034D16D00F828A87F65A728F4CE75D9F60830FD6694BE0D687D8943D57E58832
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\github.com\corazawaf\[email protected]\rules\@owasp_crs\java-code-leakages.vbs"1⤵PID:808