210ba1fffd60e7d999e3ef05fe3f8a6f2a625e7918c88be1f894a72c41cabc2c | Triage

Analysis

max time kernel
48s
max time network
95s
platform
windows7_x64
resource
win7-20220414-en
submitted
12-06-2022 09:48

Sharing

Report Analysis Logs

General

Target

????????????? ???? ???????? ????????.js
Size

6KB
MD5

3342282aede43c6e10bf019ba0ce86a6
SHA1

841e3cd7a5d3296a35d9e5bd93a94a7b730c4f68
SHA256

4fd19c856859da2d1b8726716a5e872e7b79cf4c6e1103ea8dc849574ca6c68a
SHA512

740196ff4a730e8d357ddfc155034261f51b0fbbadbb9b5967549f5ce95796aea4ab9da149b5f4d5116c91c17a8497240d8d292f16068bb1d00d1bfa6bcdc874

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

Processes:

wscript.exe

flow pid process

5 1772 wscript.exe
7 1772 wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\_____________ ____ ________ ________.js"
1⤵
- Blocklisted process makes network request
PID:1772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1772-54-0x000007FEFC1F1000-0x000007FEFC1F3000-memory.dmp

Filesize
8KB

Download