File name: | MSG_448816.vbs |
Full analysis: | https://app.any.run/tasks/f6d4068e-345d-4507-8498-11ea79be3319 |
Verdict: | Malicious activity |
Analysis date: | March 31, 2020, 10:17:41 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 64 bit) |
Indicators: | |
MIME: | text/plain |
File info: | ASCII text, with very long lines |
MD5: | 414325253C5AD923E0E9A087E2922146 |
SHA1: | 92A7C356A75A1895A6BBE821EA03026361911D80 |
SHA256: | 88A8754774C00EF9EF92BB4378979A7490779C0B10B7E690D1D8AAA9DA039070 |
SSDEEP: | 49152:BA7Lz6SY406/YJyHG+ZKIp6jg3y1GXlaNffEycKmA2nG9QCouJ1JsUOx6H31FIUU:q |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2792 | "C:\Windows\System32\WScript.exe" "C:\Users\admin\Desktop\MSG_448816.vbs" | C:\Windows\System32\WScript.exe | explorer.exe | |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Microsoft ® Windows Based Script Host Version: 5.8.7600.16385 | ||||
2816 | "C:\Windows\System32\WScript.exe" "C:\Users\admin\Desktop\MSG_448816.vbs" | C:\Windows\System32\WScript.exe | — | explorer.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Microsoft ® Windows Based Script Host Version: 5.8.7600.16385 |
PID | Process | IP | Domain | ASN | CN | Reputation |
---|---|---|---|---|---|---|
— | — | 66.198.240.35:80 | stickit.ae | A2 Hosting, Inc. | US | malicious |
Domain | IP | Reputation |
---|---|---|
stickit.ae |
| malicious |