This sample is a 5.8 KB WSF File classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file and a malware configuration (URLs (emulation JS)). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- df00d2622fb6f50f3030fbe5a873e96c3e5810c412c0c3fd71e8bafb35f3ba20
- MD5
- 65af881f9afbbc3c5a058660e4e47775
- Verdict
- Malicious
- File type
- WSF File · 5.8 KB
Cite this report: https://app.malva.re/sha256/df00d2622fb6f50f3030fbe5a873e96c3e5810c412c0c3fd71e8bafb35f3ba20
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
scr:wsf~T1059.007>scr:js~T1059.007~T1105
scr:wsf>scr:js
| Config. Field | Value |
|---|---|
| URL (emulation JS) #1 | https:huhuhuhuhuhuhuhuhuhuhu |