376180cf80a62085441a0b2a19e9b0fb2abdf3e1020955cfc4bd549e4bcc6726 | Triage

Analysis

max time kernel
117s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20220722-en
resource tags

arch:x64arch:x86image:win10v2004-20220722-enlocale:en-usos:windows10-2004-x64system
submitted
05-08-2022 18:02

Sharing

Report Analysis Logs

General

Target

AutoUpdater.js
Size

8KB
MD5

c249583badbaef9a09e430a433a35914
SHA1

6fec191fc99d6d4bf85ece108d0cdb191d2a9fcf
SHA256

376180cf80a62085441a0b2a19e9b0fb2abdf3e1020955cfc4bd549e4bcc6726
SHA512

64bd4c7ba9f05a7a30d373e99605ce851d6ec8e635343053e26d6f1bedb96aa2e7e6b25cb2923fcb5a3bfdb38d261f860b3e8226c5d2f0c5958c5025c899011d

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 5 IoCs

Processes:

wscript.exe

flow pid process

7 620 wscript.exe
9 620 wscript.exe
11 620 wscript.exe
13 620 wscript.exe
17 620 wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\AutoUpdater.js
1⤵
- Blocklisted process makes network request
PID:620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...