c1029f0b5f4f6dfbe0fe656f075cbb5ccc2fc308087db21438d73394b75ea020 | Triage™

Analysis

max time kernel
137s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
27/05/2022, 13:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
making_a_contract_legally_binding_30040.js
Size 286KB
Sample220527-qectzaegfn
SHA256 c1029f0b5f4f6dfbe0fe656f075cbb5ccc2fc308087db21438d73394b75ea020
MD5 4dd369b5e028beebe3aa5c980960c502
SHA1 2a32c3edb7edf4353f0aa1e8e4908f843b255214
SHA512 25f33c3f586a48ab68152fdf8a3537d9c11bf3b94097ff0eeb26447c16fa016d6223613a7ede3d76ee1b4a00ce4947f675088e29a10711ba642d214cd10636cb
MD5 SHA1 SHA512

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

flow	pid	Process
41	1908	wscript.exe
43	1908	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	41	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\making_a_contract_legally_binding_30040.js
1⤵
- Blocklisted process makes network request
PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads