74723b8f53fca55f5e0b5755465a69d78960131ec9dd49445b8bde4354d0c94d | Triage

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
24-06-2024 09:09

Sharing

Report Analysis Logs

General

Target

Two.vbs
Size

120B
MD5

dce4476454d12f8906cfa1db72722e2d
SHA1

4437a74ae0fcf7a4a636c04b7c0b80880871816a
SHA256

53908a91a2c298fcfd2cd278d4e273ecd55a3b5c81f10775307352aca5e211e8
SHA512

5a13b419813e768be03069332d3f655609221391b7faab5ed8c90ea57a7a26861ed0b5a256619ce9b8e62579e9e3ef9b0e8a37d6a688cb3795c62ea8cd55786f

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

Processes:

WScript.exe

flow pid process

4 2536 WScript.exe
7 2536 WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Two.vbs"
1⤵
- Blocklisted process makes network request
PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...