3098ee53b1e50fbd84095423d27e3f6da6e32a64a5a83ac64d4c45f69dd9aa4a | Triage

Analysis

max time kernel
124s
max time network
154s
platform
windows10_x64
resource
win10v191014
submitted
14-02-2020 09:03

Sharing

General

Target

JVC_38382.vbs
Size

4.5MB
MD5

805d77122834ea9fdbff06e170404c96
SHA1

10466938574f27b7ebb5818a6b8a01ae46f66c7d
SHA256

3098ee53b1e50fbd84095423d27e3f6da6e32a64a5a83ac64d4c45f69dd9aa4a
SHA512

913eeeef086abe3c60963e70b8c86182f5414dee02c19983f3999fdb400691234cefa315d8312c6eb319ada0306e9b346f3c8bc27c6e7cbae0f65fb570bbe164

Score

8^/10

Malware Config

Signatures

Blacklisted process makes network request 2 IoCs

Processes:

WScript.exe

flow pid process

9 4948 WScript.exe
12 4948 WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\JVC_38382.vbs"
1⤵
- Blacklisted process makes network request
PID:4948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...