5b6862658f6a11588c12e3fafe7d505cb123121a9c1ffc0b38352b9d823f71b6 | Triage

Analysis

max time kernel
93s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
01-08-2022 23:56

Sharing

Report Analysis Logs

General

Target

FILE_2-TW-2019-Y4249.js
Size

95KB
MD5

8c68270dfbcd3b907b6a29c9cd484499
SHA1

971dfafcea7a8b1b26174d429984d2c0a91c1163
SHA256

1e16035f416b56b7d0cdefc0fa398428a625786ff2cbf818c002b0d01cb1ec83
SHA512

8577b063bbd9e3793475e55c2749bf16fcbc147ec35cc5744b3b866df176f15269454121f7ebf87ca387245f47792226e9d44bc081bb3d54ee51a53390f88d70

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 6 IoCs

Processes:

wscript.exe

flow pid process

7 3104 wscript.exe
8 3104 wscript.exe
10 3104 wscript.exe
12 3104 wscript.exe
14 3104 wscript.exe
23 3104 wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\FILE_2-TW-2019-Y4249.js
1⤵
- Blocklisted process makes network request
PID:3104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...