5001996aa59c673607852d3156db5c0d27da19e2da7e0cf0c7bfffed50e6308c | Triage

Analysis

max time kernel
41s
max time network
111s
platform
windows7_x64
resource
win7-20220715-en
resource tags

arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system
submitted
19-07-2022 14:39

Sharing

Report Analysis Logs

General

Target

OF-3619560-04242019.js
Size

30KB
MD5

d8dd72216bd060322ac46c7257740ffb
SHA1

7fda43b576dbdce7861163ee564b25cf6eb5ddd6
SHA256

fefeae81b80a964d3c5ea9071faa2c207766e7b929a15049a4aa2087e56684da
SHA512

33ec8c9a52e27e626e90ca88e285b1c9f007a9b2548ae55e104470f751e60653c7e4bcc6c3b3a6f12ad1d88f9e4356bc219b32ac9e6c23636b15aaed7b699813

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 8 IoCs

flow	pid	Process
4	1028	wscript.exe
7	1028	wscript.exe
8	1028	wscript.exe
10	1028	wscript.exe
12	1028	wscript.exe
13	1028	wscript.exe
14	1028	wscript.exe
15	1028	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\OF-3619560-04242019.js
1⤵
- Blocklisted process makes network request
PID:1028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1028-55-0x000007FEFC451000-0x000007FEFC453000-memory.dmp

Filesize
8KB

Download