Gear Box Ffor 1964 Chevrolet P20-p30 Grumman Curbside UPDATED

Gear Box Ffor 1964 Chevrolet P20-p30 Grumman Curbside

Incident Response

Risk Assessment

Network Beliefs: Contacts 1 domain and one host. View all details

MITRE ATT&CK™ Techniques Detection

This report has 6 indicators that were mapped to 9 attack techniques and v tactics. View all details

Indicators

Not all malicious and suspicious indicators are displayed. Get your ain cloud service or the full version to view all details.

External Systems
- Sample was identified every bit malicious past a trusted Antivirus engine
  
  details
  
  No specific details available
  
  source
  
  External System
  
  relevance
  
  5/10
- Sample was identified as malicious by at to the lowest degree one Antivirus engine
  
  details
  
  4/58 Antivirus vendors marked sample every bit malicious (six% detection rate)
  
  source
  
  External System
  
  relevance
  
  8/ten
Unusual Characteristics
- References suspicious system modules
  
  details
  
  "eoside indecisive goodishness dertrum one-half-deserved peachify profoundest guineapig casefied Elsass-Lothringen mingier notepad didodecahedron Hemipodii semi-nocturnal can-beacon extensibility ill-lived supertoleration part-off Kernighan claimsmen preforgotten deipnosophistic conjure unlash Stonyford volubly gamays teenybopper riptide evenminded flabbier Polymelus nonlinkage nontumultuousness Diplacanthus nonconcentrative enregistry undergods heterochronous refastening chechem UPS Astispumante polyarticular hemautography Amniota diminuted ungothic Gapin Taganrog officiousnesses misthrew dobos papalization MacGuiness rostellarian WYSIWIS Leighton half-wittedly micacious Adalheid palmerin Nurse placate overliterariness uraemia chrysopoetic cockerouse Weston-super-Mare gaberlunzie-man longanamous Feil millipoise winebibber monarchically Sharity airsick thymiama dissyllabify sadheartedness Zervan Thurston repunch godet
  'extraembryonal unvoiced Gullstrand Broadbrook ducats abhorrer outcurved saucebox oxtongue earth-due south"
  
  source
  
  String
  
  relevance
  
  five/10
  
  ATT&CK ID
  
  T1215 (Bear witness technique in the MITRE ATT&CK™ matrix)
- Script file shows a combination of malicious behavior
  
  details
  
  The script produces internet action
  is obfuscated and drops files
  
  source
  
  Indicator Combinations
  
  relevance
  
  vii/ten

Anti-Detection/Stealthyness
- Peradventure tries to hibernate a process launching it with dissimilar user credentials
  
  details
  
  ImpersonateLoggedOnUser@ADVAPI32.DLL from wscript.exe (PID: 4632) (Bear witness Stream)
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  3/10
Anti-Opposite Engineering
- Mayhap checks for known debuggers/analysis tools
  
  details
  
  "icate myasis preedition idylian isodiabatic dept. Tekamah Neotropic salsas Delafield solicitous outglowed priesting wainbote superorganize enough buttstrap multiprogramming IISPB punctuates cabecera imbreviate impalements Pro-western open up-tide thick-swarming lamback ricasso earthnuts cheerlessness quasi-productive overharvest disciplined Bertie dusked reschedules synechistic bovicide reaccustomed valorizing hugenesses supercavitation warblet Un-sicilian Phenicia kalsomining santirs caffeins uninitiatedness papabote undercliff unsplit trainage self-developing catfight predefend aerogeography prentices Molucca prebarbarously subphosphate kajeput Trotters maltobiose flotant pulsatory piscinal unappareled thymin downlie porkpies lithospheric vesico- unpersuasive bookstores Ateles Stearn heartbrokenly air-bind vice-taming dinting anarthrosis woodsman nodosarian fenchene dark-fantabulous centaury guarri filionymic disciplinable frolicks unintelligently galjoen winterkilled anisopetalous Donelu ectocondylar plowstilt H" (Indicator: "ntice")
  "typed theorism papyrin involuntariness mumpers settlors pledget tauromorphic schistosomus Stirrat hypogaeic hyperelegance Cousy stiff-wristed unleviable yirred semimonopoly lippier expedients hoyles
  'globalist quasi-fatally derma Borough-english language Criniger drippiest lustrous seashores Duala hempseeds shortstaff Andrei siphoid loginess contactant speechlessly pregustant chich antiflash Peltigeraceae nonneural enticeable unknotty lockjaws unkist Matane pediatry tableted questful medalists monorhine Teutonesque wood-born Cacatuidae depleteable arglebargling unrollable chape fwd. water-carrier Scouse gramps ockers duellists transgressing sabadilla Carmencita debtor hopsacking unwishing arciform stridulator recrowned impremeditate semipro introducing shocked Saunderson solidiform tenias wavy-coated prenegotiate Warhol niddick axons retrolingual saccharometer muffledly goethite phenarsine dramaticle forekeel untemptability tournette inductility mishandle oxamidin ramex gorgons Arlee ratify mid-oestral lack-lustre P" (Indicator: "ntice")
  "r overcharged Rjchard perigangliitis quasi-federally overexquisitely calorically Palaeotheriidae tetramorphous sycophantry daidling deep-sworn senores Zenger ossicula blastoff cholecystotomy dwindles opportuneless Ampelosicyos clou candytuft runrounds Thesmophorian stereograph multiplicities eidolology presifts dacryd backtrick eductors mustard Adzharia helilift vagabond shamelessness sinfonie alada racks extensional philosophys unsubmersible panicking abaci wasteman intratarsal flenches testimonialized spin-dry filigrain apprenticeships donable aimed unionizer presently snaky-paced gunpaper anteresurrection synoekete huddlingly vapulation outrage unamicability generant sannyasi slipperier overapprehensiveness double-cross haemophiliac paradoxology high-aspiring Southend-on-Sea apoplex familys heavy-weight balneae ventrose Nov-Esperanto attenuates decapitation megalodont pirrauru chowhound Orientalia smacksmen waterbosh Kansas reglorify responsiblity housemating multiparty chemotaxonomic clabbery mountable pe" (Indicator: "ntice")
  "le falcation rollicky teletypesetting nonuple Pisces hearthpenny pseudodermic minkes monochromes desires Pansir unclenched ressala deductibles maces wirelessing Momuses shameless domicilic comparators mousepox Luluabourg flannelling Scheidt chebule Lipski foolishest tautonymies remediably turn-over eudiometrical sticklike chroming anticompetitive winningly cheslep oenolin thoroughpaced forejudge extra come-at-ability Remi subaerating Campbeltown lumina unbewitchingly bucare well-effected mewls chg. barytocalcite chloroanaemia ladens archigastrula predispose immonastered anticentralization puerile pounced inerringly vermily lagoonside a-effort noodged Midville footed hematinuria staphylotomies redressless stogey teniasis Hispano-american benjoin sallowing unjustifiedness Abobra empoisoning skilful sparids Polypodiaceae Cercis wont promiscuity propagating brachycrany inhabitants spaciness morphine Stymphalides unincumbered distritbuted tribually nonproven IWC glibbery self-bear witness Jogjakarta slothfulness uncu" (Indicator: "ntice")
  "D prees Ericka hollow-voiced leglessness parameterizations Schecter quasi-erotic Okolona archenemies hypopodium saulter forestaff inheritances laetic cedar-colored overtime Danese Alagoas pharyngoplegic idems appurtenant troco ragondin erotopath semi-industrially nondebilitating Brenn reinfluencing tornadolike Tennessean transmedial all-time-sighted ratbaggery Mapes rissle uromantia interstade ragi Hays deordination vice-upbraiding Sitnik well-circularized enticements innage holarthritic swank Sardo Phil-arabian Joubert octoglot handcuff panto- handwaving rangefinder Cichoriaceae oblongly pesterers exclave entermise stenorhyncous hereditist demineralization hangability acclivous faucial ovenware oceanity predilect reimprovement curiosos V civilite deleing rampoled idyler marbleness postpericardial Teutonity vaporose egestions Chuckchis septicide metrologies beasts executrixship thermoelectrical coralene contraptions excipula subvitreousness intercedes plain-spoken releasable penthrite cryptococcal lysozyme Locarn" (Indicator: "ntice")
  "le-wicket stereovision thirling buffont feuder vilayets breast-feed bear upon-hole repolls yellowman unfricative underworker Anglo-jewish Mid-italian basqued glucuronidase serifed Joses toggler vaginipennate disparpled pessimistically McConnellstown microchiria ungangrened Cynthea wide-met Mentcle sheik Balmorhea Benildas Nichola Harmonist ISC over-eager unproselyted traffic glazer paper-filled resorcins transpositor commodities sepia-colored violets monochromatism oversorrow Ahearn nondenunciating sozolic unmaterialized gyrator nonfrauder Viet prongs Jequie trabu bathyscaphe osteophony Gecarcinidae bitterns pussyfootism semistiffly chadlock Athenaeum peppercorns vision-struck fuzzy-wuzzy unsmoked apprenticeship editchar Sissel aulder college-bred homelands allothogenic maeandrine bierstubes hydroplaned conciliative universological autoformation nonimbricate undefendant Teletypesetter skelic hypophosphate Zemstrom multiconstant penpoints unplight florideous australians mycological white-eye enchanting specificati" (Indicator: "ntice")
  "ndividually intimidating starkly musha rubles nonmonistic impugnability jaconets outlanced Ermeena conquerableness renably acustom Changos lifetimes Phonelescope evil-eyed limbeck voodooism reactuate thiamines day-eyed open-webbedness perambulant ormers shatteringly subcase springhalt wasteboard anticeremonially spear-begetting proparent auto-knitted Sigyn prisal fiddle-lipped postilion Bomoseen unplanning chancering lutists flatus sayst Maller obligant purreic coryl rivalries uncontradictable grammatolatry inferrers upgazes deep-seated exodontics shroffing unmenially Trachomedusae dicked Somalia syncraniate sequentialized noninstrumental nontraditionary quasi-military Judaea uprushed proleptics neologising calorisator toyshop immodish Lunnete smokers Spanish-top offwards fibroid-wrought Knight Genista acknew surmiser pinkfishes screwship preselected sack-sailed tetartohedrism iridalgia unweetingly mayvin Whitworth projectors cervelas quasi-evil chloroplasts promatrimonial Perfeti tegs desmolase psychopannych" (Indicator: "ntice")
  "pterus potboydom steps Coverley tule dysphrenia disced eagerest easted girdle procompetition Koral calypters cambisms kornerupine unadditional girlism pleopods Salicariaceae toxamin pinpricking Argyres Gallic firework Guanche voracity acrolithan coextend quasi-personal cress feign phenformin foremanship meanie Serridentines Lotson Cyanamid lacker eelgrasses Sacks Aloisius nog saltuses unpermitted mouthy overinterestedly unspinnable helotage aplacophoran unflickeringly unvantaged undermoral Telford dustbin subahdary Jolon Belgae tooroo archdefender Halima Niobite galvo butterbump double-bitt reservicing Marshessiding respondentia syncretism handout lulled odalborn intermedious nigglingly ensophic outstayed anticeremoniously industrochemical nipter syringotomy gynaecium disgustful birle devil-ridden nonjuring microfilming kachcha manid bookfair cywydd haematoidin rum-pigsty Thorlay nonlegislative dephysicalize enamdar unnocturnal barebone spondulix articulars Joby Stans unobstructed Polad Superi oliguretic Lenini" (Indicator: "ntice")
  "able spearheaded radiolarian prohibitor tankas legitimation SQE antiques runovers derbylite
  if ( asc(mid(Xoh, i, 260 + 417 - xv + 457 - 462 - 197 - 382 + 16 + 25 + 490 + 22 + 486 - 130 - 986)) > 179 + eighteen - 370 - 220 - 22 - 11 - 10 + 265 - 2 - 238 + 458 and asc(mid(Xoh, i, 134 + 244 + 10 - 18 - 9 - 23 - 312 - 309 + 397 - 24 - 89)) < 361 + fourteen - 354 + 174 + fifteen + 25 - 497 + 23 - 118 - 18 + 3 - 2 + 12 + xiv + 406 ) then
  MAMU = ilm + ilm
  'todelike Weyermann Plantagenet difficileness unimprovably primrose-leaved sortlige anhydraemia orotunds Chevret profanity-proof girthing thermochemically panornithic hydrosulfurous regaler Centauri reedish preexploded siroc vortically Monopetalae intratelluric pervadingly besmile persistiveness gourmands sociocrat unstained veau white-light-green dervishism benzimidazole degradation cryohydrate interfraternal enticement sudaria administratrices scapement back-titration symbolisms spiderier wide-honored scorpionic allocution sewers claviharp entertake buckplate provocator hemachrome nec" (Indicator: "ntice")
  "ry suppurating wisely parecisms hematocyte zonate heptarch before-noticed obstructors close-bred chiliadron surg determ waggoners incomer monumentalised retrospectively supernumerous noncorroborating expressionless-roast inconsciently antioptimism Temenus aglucone preceptoral glissandi correlation athenians semicurl chill-bandage addressability trundling cleomes membrana arterialize convocative manureless seminaked piache happier denticete phylaxis mucronated critickin reconcoct nonabstractness Yekaterinodar uniserially ungodlike tavern-hunting self-presented pragmatistic exceptions Joed elfwort kosin trapezate strivy quotum pottering equitableness Dinaric Bertram apetalousness Fox Oriole membranogenic shutterwise narcoma Zashin pinxit flirting nappe quasi-remarkable gelndesprung 30-inch root-neck glanders Amir Jacobinised jutes cognoscent medicinableness rencontres proligerous volleyball unstagnantly aminated outwith setline Lewis objectlessness whalehead hydrazobenzene tripinnated fraist chymiferous set-starched s" (Indicator: "ntice")
  "blicizer fourchee untraceable sorboses scutellarin rheotan Winnie anorthite allantoides graphitized enceintes outate unbesotted thoracocyllosis strive imbarkment she-fool transects ensweep CTA twice-printed dispence perpended alethopteroid shivah Corporal bustics preprogrammed vriddhi snarly Larnaudian denticete Lubet mesenteritic pinnipedian magical impleading winnings stackmen Huldreich proconsulary cocky-inspection vammazsa advisable full-stuffed engirdle tamales unplucked Christoff confessarius likingly stationman naid forgive purposelike Halford superfusible interbastate prebarbarousness nondeistical Himrod yodeling somnolize Rafer bedrowse plaudation totalist equi- arear Gahan tonsillectomy Stecher Tenaha prebaptismal beblubbered feceris iodid marred Ulrick condoners vidya amylodyspepsia pyroxmangite unexhilarated Drygalski disentitle aporetic Blyth Indianization Audion pre-Lutheran monoxime nonclarification semi-idiocy rhinoceroses quadrans propalinal sedimetrical overfluentness alumina Wunderkind pro" (Indicator: "ntice")
  "ts teacups capsizes far-extended reaccuses unentranced Eranthis bypassing levynite MVO Ivie mootness levitation meatuses fluorenyl saxboard monastery perfections Columban neglect ental sagger turboprop negligences zoophysics antilogarithmic streptococci Ninshubur coprince cognomina anepia truncate sharecroppers prepack sweetnesses Tenafly unalleviatedly Saunder medullate postfoveal spatium canonize unrefrainable aqualunger satrapy Royal Eurypharynx unepauleted fulmineous talliating music-making successless subtilized Gitksan proanarchic apprenticement pervadingness moniliformly geranials apasote KCB quasi-rural penes traceries trinunity Chanel oophoralgia Nordicist VNLF smoothen-fruited eyeball liberating serpigo coyish ironer cointensity raw-head allocyanine interdeal grizzle aitesis shivaree birefraction nonattestation ephemerides esterling orthoxylene Aramidae Anglo-soviet rufous-necked Kamasin semipsychotic nonborrowing Shostakovich Beylic volsella daffing porcini sticked peasticking accessoriness scarpers" (Indicator: "ntice")
  "ameriness dewing Khartoumer schola pastel-tinted boathouses dice-hard roomkeeper thelyblast demihuman disobligatory spurrier Earlington aquaplanes falbala feebleness usitate subprefectorial q-boat arches-court arithmetically ratty procrastinator rappelling intraserous rossite alt. supereconomies dessert snowshoes peripteroi proviral wailfully overfroth uncharacterised Mackinaw quadrisulcated Blackey whulter bestay deuteric ionizers tweed-clad Cupania circumspective out-of-door neither undesponding enticement emperil reassortments Askari pseudobrotherly PROPAL Mikihisa anecdotalism Leoine shuttlecock antarchistic cleruchy Muriah beady pore swallowling undiametrically unassuring hangnest originatress Orren egoize helicity phylaxis wardrobes liverberries gyromancy single-mindedly pianka unanimity preaccomplish logia underhead plasmolyze wentle back-breathing commonership nonexternality fantastry Beavertown nondiscriminatingly treed gonomery dirts Gerius laparoscopy grieveship Denoting infans artcraft refrigeratio" (Indicator: "ntice")
  "ullest far-sought parataxis Humpage minced-pie parrotlet colophonite unreclined untuckered buffoons maister dharna anthropotomical Conny pentadactyloid tristesse Schottky individualizer nondistributiveness unulcerously charcoals unfugitively anticentralist star-ypointing mesmerise disclosures preextinguish Posehn anisogamete Heidrick Jobina supereligibility devils movie hydrometrical lurdanism prospections bakie backlashing sulfarsenide alpenstocker tabularia pulvination ungull wealthful periaster preform laureal Ismael holmia nominal Dindymus nonprognosticative exegesist moper butcherliness sledges isochasm Irwinville enhaloed nacre crystallizer malwa papalization aku xanthomelanous costusroot noncontiguities teethe sannhemp bachelorwise Hiss straw-breadth boodles foreseen antineutralism tirrlie trifoliosis microphotoscope egomaniacally cautiousnesses lowball Guillema sofas existant chugger Zaid glidingly sternoglossal incandescences prelature pozzolanic cebollite Amarillo nonauthoritative phat peptohydrochl" (Indicator: "ntice")
  "n gorer spleeniest wickedness silvery-hafted undaintiness high enteradenological unrefining Tomahawk knol-khol brimming-full nephrectomised unperverse satem postholes youngish de-electrization cerebrosis wayfarer metaler lefties carpolite Promessi overprolificness refrainments splashily chichi Somaliland bavardage Bullitt stablest incompliancy lysed veil-hid Eshelman thrombosed motorists Summershade heat-cracked weight-resisting Phycomyces epipleurae preapprehension heresiologist antinationalistic nonmasculine superconfidence reprecipitate Pattison guddler ultrafiltration incompetence sullen-looking valetudinary unapprenticed potoroo uninterpreted postcart Mojave nondifferentiation hollow-forge insperge hemellitic radiotelephone macaroni unprovidential synechdochism frampler neurographic tonishly ill-agreeing rotuliform catnapping muntjacs depressurize Weismann Leonids jinxes ghostily wokas crumbled P.Due east. nudzhes apologetics cylindric-campanulate idiodynamic reharvest Jhelum chercock hootier dipicrylamin sharp-" (Indicator: "ntice")
  "-spell Sublimity readdressed pearl-bordered channelizes NQS legitime pandaric cauboge hemitropous nonadapting electrovalency drippiest Prentice moneyocracy restamping hawsers Batesburg autogamic undismayable palaeoethnobotany infralapsarianism pronounceable baronries you-be-damned pryers ostracoderm ravening wisdom-giving Stanislao edder overmortgage saccharide-laden storiologist Fuirena Shina long-memoried rottock Irishized vacuolated thunder-forging wanger Dravosburg zeroes Kobayashi fillipeen ATN internodal hyperoxygenizing overloudly epicystotomy bellman Rudolph consecutiveness clyfaker criterions Cher cockinesses insociability Hjordis small-celled enfevered unpenitentially wary-eyed Chevrolet Antipas Bluehole courtroom-baron Mertensia fewnes nonseriality invirile outlearning PCAT hotchpotchly Cannae vignetter tabooing Marchantiales gripingly cephalotheca macrodont self-controlled nonmicroscopical pliciferous instils catdom treponeme xs verd philhippic lacinia Parnassia Kashmiri fetology slatified Virtanen Kelton" (Indicator: "ntice")
  "G appended superpatriotic Klarika stony-winged salifies frumentum sibilancy attern Olor suasibility Whitweek skyhoot deport-forrard paretics brushoffs fire-spitting pectinite sciuromorph sipping imagilet Prussify gnomically frenzy eyeservice anaglyptics pleasantish transubstantiative myelencephala wive slate-dark-brown exceptionally Woodsia 2-eared urazin fornenst Duchamp undescriptiveness bejade Jeffries filibustrous ambalam househusband EEE platysmamyoides rhodamin intercircling maskalonge biacromial zoopsychological phosphine undeferential aphthongia doumaist microporous cranioclasis truing trihemiobol two-pair karstenite frugalism overcertified obscureness Russo-caucasian serpentinous nonfinitely jacks unimpurpled sun-outshining optional cnemial crayon hypoadenia roughwork urechitin fistulous lodestuff moviegoing mailwoman passibility electrodeposit loose-robed night-hag rums unhypnotise apprenticehood nonglandular octan cremocarp shorebird unchainable patterny trypanosomatous saccharifying haemostatic malapr" (Indicator: "ntice")
  "amatical bedusk Oxyopidae the reaal laissez passer. cutter-off denticete CRL Zacata masdeu Yuga diagrams bedlamise misunderstood wingbeat Agropyron splanchnomegaly uprears hema- imparting immortalism impercipience Anomiacea maltine presettle Sallust tsumebite aphrosiderite unvolitional birthdays faradisms sovietizing pourprise KR procapitalists corpore side-walk intersolubility grandeeism untheistically hackbut tongue-back occultism on-glide licheniform POd Scotchness absinths vatus transcience amalgamable undewily froglets overabstemiously unmiracled Ofilia complimentariness strig underbrush sunscald ineradicableness grenat blanquillos nonassentation dialectologies Pharyngobranchii Valerian ethereal slumminess toll-gatherer Mableton hots undramatizable poppa impermeably devirginator keraunoscopy undershone noncongruent geoffroyin italicizing Ampelidae unbashfulness interassociate Mycobacteria fourth dimension-table orthoxazine bairnly idealism nonequilibrium Tobi Palaeotheriidae initialled Ammonitess Pickrell conservatories hypno" (Indicator: "ntice")
  "tions anacoluthic rebellious Strophomenacea coccygalgia Asahel antinoness anticentralization reinscribed prescript jewel-proof nictitates hypotheticalness haptophorous faggoted correcting de-heady sausage-shaped Cumacea copopoda flower-decked datiscosid diagnostically umps pleasantly smooth-surfaced Poriferan Chrisy bow-legged RI bucconasal Mount Riggs warrok turkey-plumage aortographic Annwfn hyperepinephria Vorlage reputableness bootleger bedevilling self-subordinating mantelletta exception Leucophryne canvass beadleship dermatographia wainrope Jebus creance pelviform exhorters faniente faitour Siddhartha ante-orbital D/W Merrick sidebar sublanguages front-rank retruse perfectionists apogamies Normanism micronucleate lysates quasi-nebulous sippingly ovatoglobose ischiorectal banqueted anvilling Soul polysalicylide Anglo-manx debeak strue cyclohexane giveable hampshirite Ambur devoutlessness Zaglossus hylomorphism Lycidas lungeous well-itemized radioneuritis thoughtlessness bechatter saintologist Copley g" (Indicator: "ntice")
  "acillation Bohm flocculate Mycetozoa phthisiogenetic duets oft-named rufous-tinged Fructidor avitic star-ribbed douching purpurine ephoral Jessalyn proverbing unflavoured lichen chaired Khoury strabismical shuffleboards mangel-wurzel candlebox campiness subaudibly repollute fugleman battlefields endostylar kawakawa sky-blasted Norbertine inconvertibility bluntest smokelessly scandal-mongering revilingly tin-foiler unquietude allosyndetic furcates Republic of cameroon intertubercular Nace peritonital antinationalist melanomata calceate embosom subdealer poverty-proof hydrothecal semihumorous nonsubmission noncleistogamic anarchist well-satisfied calomba surceasing illuminations logwork nonsynodical trisulfoxid ferro-concrete subtotemic achromatize relates unenticed bolomen haematocrit tenuicostate harstrang moderantism commensality half-hidden unbeaded homotypic kinetophobia Cassella rudity frijolillo cystocarp Rosser drofland Durango kickout myoclonic conubium become-devil Elkhart chairmanning Bielersee primi Athaliah recoll" (Indicator: "ntice")
  
  source
  
  String
  
  relevance
  
  ii/10
Full general
- Contains ability to discover and load resources of a specific module
Installation/Persistance
- Executes a visual basic script
  
  details
  
  Procedure "wscript.exe" with commandline ""C:\JVC_49977.vbs"" (Show Process)
  
  source
  
  Monitored Target
  
  relevance
  
  10/10
- Writes data to a remote process
  
  details
  
  "wscript.exe" wrote 32 bytes to a remote process "%WINDIR%\System32\ntvdm.exe" (Handle: 604)
  "wscript.exe" wrote 52 bytes to a remote process "%WINDIR%\System32\ntvdm.exe" (Handle: 604)
  "wscript.exe" wrote 4 bytes to a remote process "%WINDIR%\System32\ntvdm.exe" (Handle: 604)
  
  source
  
  API Telephone call
  
  relevance
  
  6/10
  
  ATT&CK ID
  
  T1055 (Show technique in the MITRE ATT&CK™ matrix)
Network Related
- Sends traffic on typical HTTP outbound port, but without HTTP header
  
  details
  
  TCP traffic to 35.231.146.96 on port fourscore is sent without HTTP header
  
  source
  
  Network Traffic
  
  relevance
  
  v/10
Unusual Characteristics
- Checks for a resources fork (ADS) file
  
  details
  
  "ntvdm.exe" checked file "D:"
  
  source
  
  API Call
  
  relevance
  
  v/ten
- Tries to access unusual system drive letters
  
  details
  
  "ntvdm.exe" touched "1000:"
  "ntvdm.exe" touched "50:"
  "ntvdm.exe" touched "M:"
  "ntvdm.exe" touched "N:"
  "ntvdm.exe" touched "O:"
  "ntvdm.exe" touched "P:"
  "ntvdm.exe" touched "Q:"
  "ntvdm.exe" touched "R:"
  "ntvdm.exe" touched "South:"
  "ntvdm.exe" touched "T:"
  "ntvdm.exe" touched "U:"
  "ntvdm.exe" touched "V:"
  "ntvdm.exe" touched "W:"
  "ntvdm.exe" touched "X:"
  "ntvdm.exe" touched "Y:"
  
  source
  
  API Phone call
  
  relevance
  
  9/x
  
  ATT&CK ID
  
  T1083 (Testify technique in the MITRE ATT&CK™ matrix)

Anti-Reverse Engineering
- Contains power to register a top-level exception handler (oftentimes used as anti-debugging trick)
  
  details
  
  SetUnhandledExceptionFilter@KERNEL32.DLL from wscript.exe (PID: 4632) (Show Stream)
  
  source
  
  Hybrid Assay Technology
  
  relevance
  
  1/10
Surroundings Awareness
- Contains ability to query automobile time
  
  details
  
  GetSystemTimeAsFileTime@KERNEL32.DLL from wscript.exe (PID: 4632) (Show Stream)
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  i/10
  
  ATT&CK ID
  
  T1124 (Evidence technique in the MITRE ATT&CK™ matrix)
- Contains ability to query the machine version
- Contains ability to query the system locale
- Possibly tries to find the presence of a debugger
General
- Contacts domains
  
  details
  
  "campellicosmeticos.com.br"
  
  source
  
  Network Traffic
  
  relevance
  
  ane/10
- Contacts server
  
  details
  
  "35.231.146.96:80"
  
  source
  
  Network Traffic
  
  relevance
  
  1/10
- Contains PDB pathways
  
  details
  
  "wscript.pdb"
  
  source
  
  String
  
  relevance
  
  1/ten
- Creates a writable file in a temporary directory
  
  details
  
  "wscript.exe" created file "%TEMP%\ColorPick.exe"
  "ntvdm.exe" created file "%TEMP%\scs447D.tmp"
  "ntvdm.exe" created file "%TEMP%\scs448E.tmp"
  
  source
  
  API Telephone call
  
  relevance
  
  1/10
- Creates mutants
  
  details
  
  "\Sessions\1\BaseNamedObjects\Local\InternetShortcutMutex"
  "Local\InternetShortcutMutex"
  
  source
  
  Created Mutant
  
  relevance
  
  3/10
- Drops files marked as clean
  
  details
  
  Antivirus vendors marked dropped file "ColorPick.exe" equally clean (type is "HTML certificate ASCII text")
  
  source
  
  Extracted File
  
  relevance
  
  10/10
- Logged script engine calls
  
  details
  
  "wscript.exe" chosen "WScript.Crush.one.CreateObject" ...
  "wscript.exe" called "Msxml2.ServerXMLHTTP.half dozen.0.CreateObject" ...
  "wscript.exe" called "ADODB.Stream.6.0.CreateObject" ...
  
  source
  
  API Call
  
  relevance
  
  10/x
- Process launched with changed environment
  
  details
  
  Process "ntvdm.exe" (Show Procedure) was launched with modified surroundings variables: "Path"
  
  source
  
  Monitored Target
  
  relevance
  
  x/10
- Spawns new processes
  
  details
  
  Spawned process "ntvdm.exe" with commandline "-i1" (Show Process)
  
  source
  
  Monitored Target
  
  relevance
  
  three/10
- Spawns new processes that are non known child processes
  
  details
  
  Spawned process "ntvdm.exe" with commandline "-i1" (Show Process)
  
  source
  
  Monitored Target
  
  relevance
  
  3/10
Installation/Persistance
- Contains ability to lookup the windows account name
  
  details
  
  GetUserNameW@ADVAPI32.DLL from wscript.exe (PID: 4632) (Show Stream)
  
  source
  
  Hybrid Assay Technology
  
  relevance
  
  5/10
- Creates new processes
  
  details
  
  "wscript.exe" is creating a new process
  "wscript.exe" is creating a new process (Name: "%WINDIR%\System32\ntvdm.exe", Handle: 604)
  
  source
  
  API Call
  
  relevance
  
  eight/x
- Dropped files
  
  details
  
  "ColorPick.exe" has type "HTML certificate ASCII text"
  "scs447D.tmp" has type "ASCII text with CRLF line terminators"
  "scs448E.tmp" has blazon "DOS batch file ASCII text with CRLF line terminators"
  
  source
  
  Extracted File
  
  relevance
  
  3/10
- Touches files in the Windows directory
  
  details
  
  "wscript.exe" touched file "%WINDIR%\System32\wscript.exe"
  "wscript.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls"
  "wscript.exe" touched file "C:\Windows\System32\en-U.s.a.\wscript.exe.mui"
  "wscript.exe" touched file "C:\Windows\System32\rsaenh.dll"
  "wscript.exe" touched file "C:\Windows\System32\scrrun.dll"
  "wscript.exe" touched file "C:\Windows\System32\wshom.ocx"
  "wscript.exe" touched file "C:\Windows\System32\en-US\KernelBase.dll.mui"
  "wscript.exe" touched file "C:\Windows\System32\msxml6r.dll"
  "wscript.exe" touched file "C:\Windows\AppPatch\sysmain.sdb"
  "wscript.exe" touched file "C:\Windows\System32\ntvdm.exe"
  "ntvdm.exe" touched file "C:\Windows\System32\en-US\KernelBase.dll.mui"
  "ntvdm.exe" touched file "C:\Windows\_default.pif"
  "ntvdm.exe" touched file "C:\Windows\System32\NTIO.SYS"
  "ntvdm.exe" touched file "C:\Windows\system32\ntdos.sys"
  "ntvdm.exe" touched file "C:\Windows\System32\NTDOS.SYS"
  "ntvdm.exe" touched file "C:\Windows\System32\config.nt"
  "ntvdm.exe" touched file "C:\WINDOWS\SYSTEM32\HIMEM.SYS"
  "ntvdm.exe" touched file "C:\Windows\System32\HIMEM.SYS"
  
  source
  
  API Phone call
  
  relevance
  
  7/10
Network Related
- Plant potential URL in binary/memory
  
  details
  
  Heuristic match: "campellicosmeticos.com.br"
  Heuristic match: "GET /wp-content/uploads/2019/xi/discussion/aaaaa.png HTTP/i.1
  Connexion: Go on-Alive
  Accept: */*
  Accept-Linguistic communication: en-us
  User-Agent: Windows
  Host: campellicosmeticos.com.br"
  
  source
  
  Cord
  
  relevance
  
  10/10
Spyware/Information Retrieval
- Institute a reference to a known customs page
  
  details
  
  "ra Zoilla undark labiodental lurking Guendolen trekboer Fabraea Mooreland longlines Cloisonnisme theologian rerailer finitive withing phthalic piglets deaspirate xylostroma margeline lego-literary Efik enfasten Furnerius rascallike pathodontia overpatriotic grassy-leaved gaywings wastement nonidyllically simpered redskins nightfowl feuilletonistic ellipsoidal-ovate lycopenes downthrown tenues romanticized atresy polemizes Breslau Zyzomys Ringle Michal twittered interleaved orgiastic synrhabdosome snail-slow Rhys wind-instrumental PERT plage uncredulous bebled capsulized skidway acetocinnamene sortment outvotes reflexism weals admissible Cubage bridgewards well-tuckered fair-leading accrementition mucigenous nonpar umpteenth scopuliform rhetoric mudpack chertiest lucently eluviates Tehuelet trefoilwise romanizes epitomization unkneaded ufologist Levallois hardstanding scratchweed Circinus HSC nonscientifically Whiglet closkey Nicarao Lupee toadess no-fault marble-arched under-wagon pre-emptor unstyled acanthoptera" (Indicator: "twitter")
  "redhibitory detachment disilicide hypothesised slashes satellitium spookiness traffic braggartism unsteered Khabur fertilitate talmudists jiri Cruciferae gastro-omental Shargel vernacularized giraffe Mauriac idolographical readorns unhopeful Oreodoxa denazified Merima spermaphyte longheadedly spryly fivepenny flame-haired Kudrun Pasadena Vougeot Heathcote contraparallelogram cymophane assish necrophagan doublehorned noncontaminable strollers proguardian Aubree determinant funariaceous sun-crowned galahs ichthyographic snobbishnesses Bophuthatswana rebetake superscription pn- empery Para-thor-mone regel telethermometer accolle catatoniac zoobenthoic penetrators helmetlike apertness mayweed stonify Kustanai ruridecanal etherialization napkins digitoxigenin round-stalked fitcher takedowns angoras nongelatinizing ajivas marcot Constantina achaenocarp boiler-testing AFIPS Wurst preappointment cokernut outwitter furnishes muckiness Homo agin Littcarr protomagnate D.A. policymaking bargir badge ileocaecal LARC h" (Indicator: "twitter")
  "t goury atheneum Brandais nonextrusive surely pelisses Imre geldability tablespoonful mutuel cobras Jemima feudum miriki unequilaterally meriah subprofitableness multurer compromitment alcaldia verray papolater vermilion-spotted encolden Zeiger Poysippi Grendel kryptocyanine fora Cletus holmiums inexpressive Landsmaal twitterboned beelines vowellike mar- fermium subrule jars flypaper distelfink enfranchise deboise conopodium chutneys antiparticles nebenkern Thok weeped regluing Abelian chemolysis reenforcement Sinbad klieg unsorrowful Burtie Angarsk MedScD quinsyberries tallageability table-shaped Ziphius effusion jeddock ungroundedly preplot codeines apophlegm uredosorus pseudochemical pseudointellectuals denigrations Afrogaea buffetings unglorifying forelaying Caenolestes susception hipp- swiftnesses eurytherm walla psoriasic coigne Machutte outstreet nonpresentability bluntishness upchimney reaver capsizal inlapidate til Gentes muskiness wauks positure conveyors dynamists macchinetta woulfe unintermediaten" (Indicator: "twitter")
  "weltrier saintlikeness fleshy unmercantile allogamy suppressive Zachow Dusserah Tendoy faulting Cleopatra proguardian pyrotechnically vergery crib-bit volplanist twittery incuriosity self-adornment fillos anonymousness manba mameys unmorally tegg intens Burnight perotic animists upstarts vagaries sward-cutter improducible unself-consciously byward Artie speeching bruits interrogatory Anzengruber unchawed strutted imposement snowballing Penwell wudge undercurrent semimountainous cup-tossing Metatheria turkeys undersshot Altamont Cidney ecurie throughgrow miniaturist Not-stoic toolkit reparatory omasum graniticoline Parthenium odontopathy tiger-minded mockful peacockly Butler punyism both touchbacks deathfully gloom goodwives pyoctanine Buceros thioneine unbilleted keraphyllocele depasturage hutuktu fleyedly ionogen squillageeing pleached awin Antirrhinum ironheads virement unblaming Endopterygota Sinologist overexerted collaborating overneutralize subcandidly rigamajig Kiangwan Shoshana northered overpressures" (Indicator: "twitter")
  "Tibetan royster tackles Rahu duckers gaist noncausativeness Jeannette furry hubbub Honesdale nonfrat quadricuspidal laiose Barnaby Salique obelisk knobweed corotates bypass Econometrica holotony storefront pearl-headed Valrico thick-decked ictic Randolf coalifying unheaved farseeing unburdensome dove-colored acaudelescent Lauretta forthcame cobblership downdraught conductitious otherhow gametogenous Ceto gripers prests weather condition-scarred scar-faced cinnabars Cav. daggle-tail caecias glucolipine arseno- gyroidally imperforated twitteringly proprietaries obfusk graduations hyperpnea nihilify gnarlier spoken communication-famed scare-hog introthoracic skirl Octavla ringboned Origine discrepancys nonpossessive Aaronite unpraying fuds shallowy crabbily compounders unpelagic uncolonise throwout deglutition semuncia rockbell Lydie pyeloureterogram scholiastic concretive doornboom unphysicianlike nonconcentrically intercrystallize rotund mouthiness decompositions Doncaster variolas MITS Pang-fou summer-lived haplodont hypotoxicity me" (Indicator: "twitter")
  "rably nonintroverted untunable Tham chagrined unvested sackdoudle ller reincite Kenmore Sub-atlantic delegating transpyloric hysteropexia upsending Montaigne teratogenous undertone Levit. anchoic pre-examiner waspy Angevine poiser Serphoidea concludible redoublement Irby indazole Hermaphroditus distrain securings overhail unsulliable cavemen maftirs potencies superinfluencing Pisek Dallon fishboats uncultivation splanchnography wifelet pseudocharitable plastify tropisms guggle Ennius placeful Yankee interosculating acyloin Liukiu three-electrode contaminates acinetinan self-blessed vats reattaining quasi-judicial homilete illus serpentoid Ringwood trustees postulatory marble-looking self-conceit alleviate Alfirk Shemite Sices Asenath introductions porridges microelectronic slime-secreting mitring unheed augment unsurcharged mylohyoideus glossarist orthodromic twitched assumpsit paramimia loftsman lumina bibliokleptomania twitteringly overmonopolize fenester lyctid Matlick cargo Maggee circumfluent mandragvn p" (Indicator: "twitter")
  "sation A-centrality uncentripetal arnattos spermines one-half-erased unlays soboles tubemen supersize nonintercourse unthrall stainability missort Doukhobor outhowls hieratica stiletted cephalonasal Galliano critturs Caladium trisomes Dorpat past-channel conditions-bitt pai-loo arthrosyrinx enrich isatine undeliberatingly sabora tabularization macarizing scuppers bedeguar Sparti undecide nitty-gritty tailorless displicence typ Susanne rechafe retired adenase twitteration partisans wrastler sit down-down xenoplastic bigas rediscussion heaven-guided Stephana Trachomedusae holcodont thick-breathed taysaam Whitestone straight-hemmed democratising lecaniid Bernal pikeperches peucites dowry loft-dried proctodea whaps stepmothers squabby Buote overintensity myocardial compot areole nyckelharpa molifying turbanwise fabulist helodermatoid Acres Griffiths snuffly matriculate professorlike nevel imparting antilipase night-shift undersells tonne unadvancedly degree-cut Carcinoscorpius spitter estivate court-tialed torsibility poultry Staple" (Indicator: "twitter")
  "eciable balklines formulization Holton girrock hampering frocks Prog prosaists satisfiers theftproof carburated Simsbury nucleates Loredana accounts big-ankled fifty-fifty-mindedness medicinary spear-shaking kitchie NTSB mortarware transcendant beech-green trumscheit ytterbite rumbullion haratch stogie pirned inducible teamster tabret zoosporocyst neuritis subtenant cavers circuitousness apostatically tumblerwise isodomum twitteration former galoped selectionists reprotest sitringee unvitiated halfa after fielded polyarticular ethnocentrically backrope subheadwaiter hulotheism indians unsteps enplaning Pepusch platier reophore fair-trading impenitence summable petticoating receivableness Astraeus omnifying oxydation nonfarcicality atty. terebinic guesser Creusa hypermorally Leopardi ctenodont outsuitor choultries gastronomical sumpitan Phina GTC admonitorily picas cluff image-maker Idun humanitarianism warwards unorthodoxly thewy unwinly beanbag oxland needleworker curarines outwhirled Babelize Pandemonium cytoge" (Indicator: "twitter")
  "tualized sicklily melanodermic lengthens loose-writ saviorship fichtelite longings Declo beigel harvestable Petrogale beavers equiprobable justiciary half-contentedly sick-stake preinvestment unheuristic diagrammatic methodizing quandarys bolsters subdiaphragmatically befitting cross-fiber twice-parted Verrocchio Pro-carolinian upbbore confrontation manufacturer armpit pilpulistic Fara assalto false-visored Issedones thank-offering fisetin screw-pitch glycosemia Nuris unsacrificeable raguly undefaulting whoosies tossut tip-tilted Point macropsia brachio-cephalic indistributable idolaters Madelina rattoon catling severest Halocynthiidae cervicomuscular Takakura Saros overtrustful moras broadlings panettone Aquone guntub fruitist overfly phytosuccivorous BFT sulphowolframic antiprohibition Milburr stablelike characterologist ghost-writer Ursala signator Yarvis Tsiranana twittering sorer exercise-re-mi self-punishment psychoplasm supervoluminous acetylenic Oct. nonhumorous soft-natured mellow-toned Trigla Fla. world-lo" (Indicator: "twitter")
  "walkouts misgrading uninclinable blemished world-acquisition broken-mouthed counteragent roentgenometries omnivorousnesses coroplast Gardas arbutus acale overfiercely galactophlebitis deformedly soils helpful cornrow preinvention rebemire headsman Gov. paneling stump-legged unwilier haver-corn scrub netman invalid Popper unambitious seatrains Distichlis self-satirist Podaxonia double-framed bran-new rheinic inceptor shoreman well-tanned overwearing impetigos ape-human being synclinal architecture SJC unmovable deaconate cystoid nonmutative close theophagous persecution Jivaros bonewood civilians Ottumwa pumices faking lapidated kill-crazy commenting cantilevering twitters Efren architectonically snookums premierships declassifications vulgarian uncovers unresistible impreventability LDX pastelist twice-terminated toyed rehypnotizing immixable gamblers busybodyness WOW Fin. gloves infamies kittenship pacemake repullulescent interloping orpinc foppishness complimenters semimonastic tobacco-stained sneakingness matchmark" (Indicator: "twitter")
  "usly twitchet canyonside ricinium chrysocracy rushings leveed promise-keeping preenlighten imprints agnosia stony-eyed renovatory kolmogorov wosith blether Babine Eisenach salacot feif unparallel sphygmus allonomous embryography platymesaticephalic stills desmotropy tarted glue twitterer squanders vernant slanderingly prooflessly antiliberal surrenders quillaias antihierarchal Cloanthus Erinys dematerialize unempoisoned intromitter lairdie registrar footless Sarnath Verrazano unparadoxal figuration triptyca nailwort monomethylated idealised roundtail radicivorous scent-smock scotographic Joell multipede columnizes tritheism a-flicker wolfsbanes alizarine supervitally Erulus stromatiform unmundified Ducasse outslept allurement compilator antihomosexual Epping diereses domus daimon bitting greyskin calorific scutibranch pretardily lansa illfare three-nerved yolks nastier fontlet morts acipenseroid wing-tip cockcrow Hart ADCI prescission Garvin conbinas bacteriotherapy overfasting begrudges praepositure gain" (Indicator: "twitter")
  "-morte subplantigrade photodermatism overprovocation arsenolite bronchoaspergillosis unwontedly supraspinous pre-eter dermatologic polyhedral tonner liger meat-packing Bowell colliquefaction Strander eegrass engines calcify unweave streamed Zetland ticket deliberative pere woods-domicile granduncles Kwei stellately oblatio radiobiologist fungus-covered pentyls Smithsburg spontaneity nonepigrammatically small-boondocks sucuruju discussionism MacDougall disinteresting ungainful exclusively Telamon mousehole infers iodonium taluka undiverted apprizes histophysiologic maffia Perryhall restrives Corbet Hebraistical ill-naturedness morphinize attractions vermifuge foretell actg. Shantow opticochemical unrestfulness oxymuriatic overappreciatively sparse-officered rainbow-colored renu quadrisulcate migale phallical spitefulness amigo self-spaced atwitter overlent silkscreens cordigeri oranges vitrinoid Irtysh digraph overrepresentatively undulates Peratae Hermy recommending pedunculation commiserates Gounod McGannon longe" (Indicator: "twitter")
  "siphonium nonenviableness heartbrokenly Alpheratz Tropeolin AMDG aeroscopy Joiner cumulatist caponata psychogalvanometer stime brutalized guildsmen ill-cared twitterboned right-angle eseptate zygous cyclizes Houselander Bernhard anticensorship intellectualising eggers Pierceton interpretatively polyglottically sutta accouter archleader overshots fire-ring Withams Everard TW pneumonoconiosis brideweed farceurs flame-tipped xiphopagus Circum-uranian uninspected Wildon jurisdictionalism untugged gannister landtrost Crescendo Almohad snakebark Easton vitaminized noncom sanglant nonspecializing dephlegmate figure-ground autocarp schizophrenia halwe locutions ottavarima Ichthyoidea frigs synonymousness vice-queen licks Spree molmutian coesites nongraciosity corpora holystones Pseudo-homeric overnighter jackknifes antilithic cabrito squilgee elenge Wilkie smoky-looking mammin icacinaceous crescents sunquake insurmountable womanbodies quatrefeuille dichotomizing plot timberlands town-absorbing stasimon hermaphroditi" (Indicator: "twitter")
  "atwitter unlubricating Kenvir ethnomusicological Stroup outjinxes Borgia antipopulationist footmarks endeared leucic requite euchlorine consecutiveness overbaked immotile taxying actuarial bergut quarries hot-bright Falstaff fetterer nonaphetic disendower endere clinorhombic nannies sleep-created horsefair reexchanges renove conformists contradictions plague-infected unleisuredness Lutjanus Turanian Otogyps Helicaon Crow plasterwise kelps cavin grebe mukhtar nonfeverishness pottles valvulae wholesaled slow-legged premonetary Hilversum demidandiprat quadrinominal counterconversion neurilemma unmauled Blitzstein gnomons bearishness misquote quasi-compromisingly unalleviative Acrydium Anson canceling quiltings caccia shiatsu zitzit fidgeting muckiness kneecapping strooken arsons Geiger smirkier internationalise thin-featured toolers choledocholithotomy atrabilarian Conall tip-meridian pettled Schulz biquartz favour Mandingo octaroon schedulers MrsBrown vaccinators anarchy unflesh codelinquency myogenetic officiate i" (Indicator: "twitter")
  "ply dissolver scamler liverwurst autoconduction serocyst dextrosuria Tiana penalizes homopause abkar Citellus stumbler whopped corbelled harsh-tongued soldier oped aiger metakinetic Walpurgisnacht chteau chloropalladates untwinned adversive Post-apostolic uneclipsed estrums monocytopoiesis pumicating autovivisection bromthymol coverall interpleural whodunnit parallelogrammical palpacle aband Tahltan teretish Sieva Honeyville remembrances Callipus atwitter Laocoon precogitate unpossessable stockado brochidodromous Carara bregmata tanbur Mariposan analogously exotically Norco autoerotic intergenerative debasing eremophilous outpaces nondiabolical energids outbridging cracksmen Massmonger north-tuply undersail prepotently unawkward Fifty-dopa Alg liquescence probing Iole curdler flibbertigibbets notation yarn minhag echeloned infuriatedly hard-core sawmills Bahaist castelet Bria paschal syphilous contra-lode intermuscularity brakeload drumbled Trans-african theatro- undenominationally Republic of mali nocks voluptuarian Yezidi" (Indicator: "twitter")
  
  source
  
  String
  
  relevance
  
  7/ten
Organisation Destruction
- Marks file for deletion
  
  details
  
  "%WINDIR%\System32\ntvdm.exe" marked "%TEMP%\scs447D.tmp" for deletion
  "%WINDIR%\System32\ntvdm.exe" marked "%TEMP%\scs448E.tmp" for deletion
  
  source
  
  API Call
  
  relevance
  
  10/ten
  
  ATT&CK ID
  
  T1107 (Show technique in the MITRE ATT&CK™ matrix)
- Opens file with deletion access rights
  
  details
  
  "ntvdm.exe" opened "%TEMP%\scs447D.tmp" with delete access
  "ntvdm.exe" opened "%TEMP%\scs448E.tmp" with delete access
  
  source
  
  API Call
  
  relevance
  
  7/10
Unusual Characteristics
- Installs hooks/patches the running process
  
  details
  
  "wscript.exe" wrote bytes "c04e197720541a77e0651a77b5381b770000000000d0447500000000c5ea44750000000088ea447500000000e9682c7582281b77ee291b7700000000d2692c75000000007dbb44750000000009be2c7500000000ba18447500000000" to virtual accost "0x761B1000" (part of module "NSI.DLL")
  
  source
  
  Hook Detection
  
  relevance
  
  ten/10
  
  ATT&CK ID
  
  T1179 (Show technique in the MITRE ATT&CK™ matrix)

File Details

All Details:

JVC_49977.vbs

Filename: JVC_49977.vbs
Size: iii.7MiB (3839653 bytes)
Type: script vbs
Description: ASCII text, with very long lines
Architecture
: WINDOWS
SHA256
: fe9f44e79c2c01de7d4bb6c7adf0efa75f9e8fa2951e8ae3e561e112c526f5e8

Gear Box Ffor 1964 Chevrolet P20-p30 Grumman Curbside UPDATED

Gear Box Ffor 1964 Chevrolet P20-p30 Grumman Curbside

Incident Response

Risk Assessment

MITRE ATT&CK™ Techniques Detection

Indicators

File Details

JVC_49977.vbs

Screenshots

Hybrid Analysis

Network Analysis

DNS Requests

HTTP Traffic

Extracted Files

Notifications

Gear Box Ffor 1964 Chevrolet P20-p30 Grumman Curbside UPDATED

Komentar

Posting Komentar

Popular Posts