6a4f4c4d6eca866b8602725455c4156c895ea278e46b20b017e3a869ebfbf395

Login
Reports

Overview

overview

Static

static

nextcloud/...der.js

windows10-2004-x64

nextcloud/...der.js

windows11-ltsc_2024-x64

nextcloud/...ser.js

windows10-2004-x64

nextcloud/...ser.js

windows11-ltsc_2024-x64

nextcloud/...ait.js

windows10-2004-x64

nextcloud/...ait.js

windows11-ltsc_2024-x64

nextcloud/...er.ps1

windows10-2004-x64

nextcloud/...er.ps1

windows11-ltsc_2024-x64

nextcloud/...er.ps1

windows10-2004-x64

nextcloud/...er.ps1

windows11-ltsc_2024-x64

nextcloud/...er.ps1

windows10-2004-x64

nextcloud/...er.ps1

windows11-ltsc_2024-x64

nextcloud/...dy.ps1

windows10-2004-x64

nextcloud/...dy.ps1

windows11-ltsc_2024-x64

nextcloud/...or.ps1

windows10-2004-x64

nextcloud/...or.ps1

windows11-ltsc_2024-x64

nextcloud/...ace.js

windows10-2004-x64

nextcloud/...ace.js

windows11-ltsc_2024-x64

nextcloud/...nt.vbs

windows10-2004-x64

nextcloud/...nt.vbs

windows11-ltsc_2024-x64

nextcloud/...ent.js

windows10-2004-x64

nextcloud/...ent.js

windows11-ltsc_2024-x64

nextcloud/...tor.js

windows10-2004-x64

nextcloud/...tor.js

windows11-ltsc_2024-x64

nextcloud/...der.js

windows10-2004-x64

nextcloud/...der.js

windows11-ltsc_2024-x64

nextcloud/...ool.js

windows10-2004-x64

nextcloud/...ool.js

windows11-ltsc_2024-x64

nextcloud/...der.js

windows10-2004-x64

nextcloud/...der.js

windows11-ltsc_2024-x64

nextcloud/...der.js

windows10-2004-x64

nextcloud/...der.js

windows11-ltsc_2024-x64

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/09/2026, 12:23

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/ApiProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral2

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/ApiProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/AbstractRestParser.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/AbstractRestParser.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/PayloadParserTrait.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral6

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/PayloadParserTrait.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/XmlParser.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/XmlParser.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/QueryParamBuilder.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/QueryParamBuilder.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/RestSerializer.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/RestSerializer.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/XmlBody.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/XmlBody.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Validator.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Validator.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/AwsClientInterface.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/AwsClientInterface.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudDirectory/CloudDirectoryClient.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudDirectory/CloudDirectoryClient.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudSearchDomain/CloudSearchDomainClient.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudSearchDomain/CloudSearchDomainClient.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudTrail/LogFileIterator.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudTrail/LogFileIterator.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CognitoIdentity/CognitoIdentityProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CognitoIdentity/CognitoIdentityProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CommandPool.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CommandPool.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/CredentialProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/CredentialProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/InstanceProfileProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/InstanceProfileProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Report Analysis Logs

General

Target
nextcloud/3rdparty/aws/aws-sdk-php/src/CloudDirectory/CloudDirectoryClient.vbs
Size 9KB
Sample260924-pkwctstdla
SHA256 6a4f4c4d6eca866b8602725455c4156c895ea278e46b20b017e3a869ebfbf395
MD5 31875e204a29f0d65da5ea5b1b76cee3
SHA1 f379fcbffa668e2c03b885cae38d84d9b2cf58d6
SHA512 d186250851be93ab85f8c6b8548e0599e8088c74d296822d7b3a096f3844615b2ef2b10e23b5c79e17169a9fe69b02a984b0bdac49df669656db6405ffd11af9
SSDEEP 192:sNl5BNZFVfsA93opubooA35+PLndYOnjwrlQVst2YzpIJS1T9D9j9t9J9d9e9R9C:aQsB9hkx
TLSH
T1CE125227ABDABAE763C5F116B1E4EC2BF984D2701117CD121D8EC6DD2D8EC382A44C56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4180	WScript.exe

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\nextcloud\3rdparty\aws\aws-sdk-php\src\CloudDirectory\CloudDirectoryClient.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads