Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    18-03-2021 22:40

General

  • Target

    Finanzierung.js

  • Size

    179KB

  • MD5

    0bc9b5360f88fc7228a93b15ac0a879a

  • SHA1

    f1dd1957da7d8fd715bdcd5ce3579c30bd727e88

  • SHA256

    262329afc152fa7205598cc6e67751a7b0634e65d2c15cbdb3d4da377a2408c1

  • SHA512

    a44bd6b7e4c57b7784c96f8f0176d000a330f413b96f3dfe9221368fce37e28814d5aa8034ccfa0918348cfb174269afe94037a14301b9836e11ad119160cc45

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 64 IoCs
  • Script User-Agent 64 IoCs

    Uses user-agent string associated with script host/environment.

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Finanzierung.js
    1⤵
    • Blocklisted process makes network request
    PID:412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads