1697863d6e663fbb2cd8d288ae155f46a85de7069aad6603b171f956ea99c1c1 | Triage

Analysis

max time kernel
150s
max time network
152s
platform
windows7_x64
resource
win7v20201028
submitted
13-01-2021 06:49

Sharing

Report Analysis Logs

General

Target

a0108c12e96ababb872edd921f995af4.js
Size

75KB
MD5

a0108c12e96ababb872edd921f995af4
SHA1

5f7ae0f12839651c8d98a9d737dfa021ef176234
SHA256

1697863d6e663fbb2cd8d288ae155f46a85de7069aad6603b171f956ea99c1c1
SHA512

b3db9ee68f3388ca67c6047ddf63b1a31b985fd52eae23f9b2c30fad606c991402a93a77586a534f8642ebf17c1453cc31daafc5e5aae4447322eb0700d61b58

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 27 IoCs

Processes:

wscript.exe

flow	pid	process
6	1616	wscript.exe
7	1616	wscript.exe
8	1616	wscript.exe
9	1616	wscript.exe
10	1616	wscript.exe
11	1616	wscript.exe
13	1616	wscript.exe
14	1616	wscript.exe
15	1616	wscript.exe
16	1616	wscript.exe
17	1616	wscript.exe
18	1616	wscript.exe
20	1616	wscript.exe
21	1616	wscript.exe
22	1616	wscript.exe
23	1616	wscript.exe
24	1616	wscript.exe
25	1616	wscript.exe
27	1616	wscript.exe
28	1616	wscript.exe
29	1616	wscript.exe
30	1616	wscript.exe
31	1616	wscript.exe
32	1616	wscript.exe
34	1616	wscript.exe
35	1616	wscript.exe
36	1616	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\a0108c12e96ababb872edd921f995af4.js
1⤵
- Blocklisted process makes network request
PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1004-2-0x000007FEF7540000-0x000007FEF77BA000-memory.dmp

Filesize
2.5MB

Download