image.mp3.html| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6402 | Oct. 5, 2021, 4:45 p.m. | Oct. 5, 2021, 4:47 p.m. |
-
wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\image.mp3.html.wsf
1744
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| 164.124.101.2 | Active | Moloch |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| Kaspersky | Backdoor.PowerShell.Agent.df |
| McAfee-GW-Edition | BehavesLike.HTML.Dropper.cg |
| Rising | Trojan.Injector/PS!1.D9B4 (CLASSIC) |