b89fdbbe855d6491565249508472f2eff89733cf370f49725228a13ac2e69d61 | Triage

Analysis

max time kernel
141s
max time network
141s
platform
windows7_x64
resource
win7-en-20211014
submitted
17-11-2021 11:31

Sharing

Report Analysis Logs

General

Target

20161205_03476173ef9fdec7e5270dc7d87933f0.js
Size

13KB
MD5

57198c88a70079fdecbdcdaf3fca251f
SHA1

f9eec46611e7eb0d78e550a22e1975a896314032
SHA256

b89fdbbe855d6491565249508472f2eff89733cf370f49725228a13ac2e69d61
SHA512

0374dfbb69762b749b45e19063cb7f2f6ed261f89160b333ab2f50710c965e5cdccee2cdb3ff4d22a2be079f8f6b5ae95b32fe442e1ebbc576c8bbe61abe4274

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE Nemucod JS Downloader Aug 01 2017
suricata: ET MALWARE Nemucod JS Downloader Aug 01 2017
suricata
Blocklisted process makes network request 7 IoCs

Processes:

wscript.exe

flow pid process

8 1836 wscript.exe
10 1836 wscript.exe
13 1836 wscript.exe
15 1836 wscript.exe
17 1836 wscript.exe
19 1836 wscript.exe
21 1836 wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\20161205_03476173ef9fdec7e5270dc7d87933f0.js
1⤵
- Blocklisted process makes network request
PID:1836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads