5cf91b72c5f5bbee22d5dfb641ff2f76f3f855381b3b4825e962cace58541e6b | Triage

Analysis

max time kernel
140s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
01-08-2022 04:45

Sharing

Report Analysis Logs

General

Target

R_20344552_04242019.js
Size

26KB
MD5

dc325decfb873739d6c09055b09fc043
SHA1

50dfe46b30f8dee35bc6f1285138e3dd631165ee
SHA256

f9a3d8d2568059bff0da6d27fe8d474fa8dc1c0f97c24433f2fd9caed3594b0f
SHA512

3a468cb4ad8ebc69cd53891868949856bd5877b72191bcc500b097bd2e090ee326ca8ef82b6f0d69f9296ab79091c57788d09f905f9b8eefd87a34af3aad341f

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 13 IoCs

flow	pid	Process
16	4220	wscript.exe
17	4220	wscript.exe
25	4220	wscript.exe
27	4220	wscript.exe
39	4220	wscript.exe
42	4220	wscript.exe
45	4220	wscript.exe
47	4220	wscript.exe
66	4220	wscript.exe
70	4220	wscript.exe
90	4220	wscript.exe
91	4220	wscript.exe
93	4220	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\R_20344552_04242019.js
1⤵
- Blocklisted process makes network request
PID:4220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads