d4928d6ebe4e0edfaf6bc7e283b207ff945d0adeaa6a93c876343944b8e846b2 | Triage

Analysis

max time kernel
144s
max time network
145s
platform
windows10_x64
resource
win10v20201028
submitted
13-01-2021 07:35

Sharing

Report Analysis Logs

General

Target

Order.js
Size

28KB
MD5

5907df12de6d40772058b2fa40ea2871
SHA1

fcef8b776ec88d4ceb27dae17b46193ba4d056c1
SHA256

d4928d6ebe4e0edfaf6bc7e283b207ff945d0adeaa6a93c876343944b8e846b2
SHA512

2bef49ba3dec3275066f4747799b50130e8f6871c360c1774ee6b901246e2ce29791945a78ec28d9572853945584f05d94aae1a36f617c768730c4f0dfa30ca5

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

Processes:

wscript.exe

flow pid process

6 3284 wscript.exe
10 3284 wscript.exe
12 3284 wscript.exe
14 3284 wscript.exe
Drops startup file 1 IoCs

Processes:

wscript.exe

description ioc process

File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Order.js wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Order.js
1⤵
- Blocklisted process makes network request
- Drops startup file
PID:3284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...