This sample is a 4.4 KB WSF File classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file and a malware configuration (URLs (emulation JS)). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 3f8b447863dd61eaaa59b3160062afe1694038c7099345c4d1cc69c200a84489
- MD5
- 9f05bb2e62c2ce669dc1e596ce2c5dbb
- Verdict
- Malicious
- File type
- WSF File · 4.4 KB
Cite this report: https://app.malva.re/sha256/3f8b447863dd61eaaa59b3160062afe1694038c7099345c4d1cc69c200a84489
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
scr:wsf~T1059.007>scr:js~T1059.007~T1105
scr:wsf>scr:js
| Config. Field | Value |
|---|---|
| URL (emulation JS) #1 | https:huhuhuhuhuhuhuhuhuhuhu |