This sample is a 4.4 KB WSF File classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file and a malware configuration (URLs (emulation JS)). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 65e5183afe6e85b3e6efd534a2062e832691bf0091343de8f19212b703facdaf
- MD5
- 9774de34847cbc3366aca38800fe3a71
- Verdict
- Malicious
- File type
- WSF File · 4.4 KB
Cite this report: https://app.malva.re/sha256/65e5183afe6e85b3e6efd534a2062e832691bf0091343de8f19212b703facdaf
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
scr:wsf~T1059.007>scr:js~T1059.007~T1105
scr:wsf>scr:js
| Config. Field | Value |
|---|---|
| URL (emulation JS) #1 | https:huhuhuhuhuhuhuhuhuhuhu |