Analysis

  • max time kernel
    150s
  • max time network
    103s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    13-01-2021 06:49

General

  • Target

    рахунок № 1220-2 за декабрь 2020р..js

  • Size

    35KB

  • MD5

    9fd60979f623447f4b97c882fa4053ca

  • SHA1

    c1424338634970dd7195d033bf08890f2aca9e73

  • SHA256

    8ac952a14d08f9bb186b22791a6a6a244ef2f102f17578713a7f9dc0a37b7e02

  • SHA512

    9c6d68317b464191aa808767eb1db1876029c196cb883808a0dcade28c0451563c74437dde623aa41062d953bdc7c8d4bb2981932998ce3dcdb43fa9c66b42e9

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 1 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe "C:\Users\Admin\AppData\Local\Temp\рахунок № 1220-2 за декабрь 2020р..js"
    1⤵
    • Blocklisted process makes network request
    PID:1080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1976-2-0x000007FEF8040000-0x000007FEF82BA000-memory.dmp

    Filesize

    2.5MB